From eb88e7af38c147dd4d8619ad93abf00e80674813 Mon Sep 17 00:00:00 2001
From: Simon Gardling <titaniumtown@proton.me>
Date: Wed, 18 Feb 2026 15:32:05 -0500
Subject: [PATCH] fix(media): add ReadWritePaths for jellyseerr
 ProtectSystem=strict

The upstream module sets ProtectSystem=strict which makes the entire
filesystem read-only. ReadWritePaths is needed to allow the static
jellyseerr user to write to the ZFS-backed configDir.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-opencode)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
---
 services/jellyseerr.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/services/jellyseerr.nix b/services/jellyseerr.nix
index e9bea70..916eb8e 100644
--- a/services/jellyseerr.nix
+++ b/services/jellyseerr.nix
@@ -25,6 +25,7 @@
     DynamicUser = lib.mkForce false;
     User = "jellyseerr";
     Group = "jellyseerr";
+    ReadWritePaths = [ service_configs.jellyseerr.configDir ];
   };
 
   users.users.jellyseerr = {