setting up media server

hosts/eddie/configuration.nix

@@ -70,7 +70,6 @@
     };
 
     channel.enable = false; # remove nix-channel related tools & configs, we use flakes instead.
-
   };
 
   # Set your time zone.
@@ -79,6 +78,10 @@
   # Select internationalisation properties.
   i18n.defaultLocale = "en_CA.UTF-8";
 
+  sops-config = {
+    key-file = "/home/emenel/.config/sops/age/keys.txt";
+  };
+
   console = {
     earlySetup = true;
     colors =

hosts/media-server/configuration.nix

@@ -1,9 +1,9 @@
 { config, lib, nix-config, inputs, pkgs, ... }:
 
 {
-  imports =
-    [ # Include the results of the hardware scan.
+  imports = with nix-config.nixosModules; [
       ./hardware-configuration.nix
+      sops-config
     ];
 
   nixpkgs = {
@@ -42,6 +42,7 @@
   # Use the systemd-boot EFI boot loader.
   boot.loader.systemd-boot.enable = true;
   boot.loader.efi.canTouchEfiVariables = true;
+  boot.supportedFilesystems = [ "nfs" ];
 
   networking.hostName = "media-server"; # Define your hostname.
   # Pick only one of the below networking options.
@@ -51,6 +52,10 @@
   # Set your time zone.
   time.timeZone = "America/Toronto";
 
+  sops-config = {
+    key-file = "/home/media/.config/sops/age/keys.txt";
+  };
+
   # Define a user account. Don't forget to set a password with ‘passwd’.
   users.users.media = {
     isNormalUser = true;
@@ -147,8 +152,37 @@
   systemd.services.tailscaled.after = [ "NetworkManager-wait-online.service" ];
 
 
+  nixarr = {
+    enable = true;
 
+    mediaDir = "/data/media";
+    stateDir = "/data/media/.state/nixarr";
 
+    transmission = {
+      enable = true;
+    };
+
+    bazarr.enable = true;
+    lidarr.enable = true;
+    prowlarr.enable = true;
+    radarr.enable = true;
+    readarr.enable = true;
+    sonarr.enable = true;
+    jellyseerr.enable = true;
+  };
+
+  services.plex = {
+    enable = true;
+  };
+
+  fileSystems = {
+    "/mnt/filez/media" = {
+      device = "server:/filez/Media";
+      fsType = "nfs";
+    };
+  };
+
+  services.nfs.server.enable = true;
 
   # For more information, see `man configuration.nix` or https://nixos.org/manual/nixos/stable/options#opt-system.stateVersion .
   system.stateVersion = "25.05"; # Did you read the comment?

hosts/media-server/secrets.yaml

@@ -0,0 +1,22 @@
+filez: ENC[AES256_GCM,data:pOnl/B+dFc+Fks7Yb3c=,iv:V99CfTUmFq9ijFHU88OIvySvKw91a9hx0fXLikaAOdY=,tag:L1E2Wur2yVYaGeY+3Ku1WA==,type:str]
+media-server: ENC[AES256_GCM,data:dqwbLUXItYrx7w==,iv:lo356taPBlPPD4CqtlbQzvUJRcym0SQc1sHMYW593vw=,tag:nzhLMzVnOc0eDa/7cfnLuA==,type:str]
+sops:
+    kms: []
+    gcp_kms: []
+    azure_kv: []
+    hc_vault: []
+    age:
+        - recipient: age10k8v6pfm3p7cmsgn6wu5ufpcquqgpvqh76l23xf326et55dacc0qlr8fe8
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSBFS1BoNnpoWnZGNGQreXVZ
+            RjNGUWhoYmJPbWplcFIwOU1mdlNOYmhkblU0CmFkNkg1ZDVxU1FNbnlUMXpKWXR1
+            elZ0RFZaRDRsMkVjcFhkMXU4Q1RYTDQKLS0tIHBRZlovWlFJUDFidzBnby9VNzlm
+            OFJGS2ljaTVFcWJDL3h2S0tLR3pyekkKBY4veCtc5cmVxoDeFf1LufbFhMHnYu7U
+            jWaEgDUHHPpiR7+4XZI+Es71kyM+0q2UK0KSU5227eDCLkFvRN5uYg==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2025-02-15T16:32:18Z"
+    mac: ENC[AES256_GCM,data:drTH1sdk/KUXfeFXJVyB+21orb7maspVaDr2zZRT2z3PqLKtXVUHqSTaXKb7hETi052ibLqSfyrSCgpNcLMB4yAPrLz/u7nADcxvrnmugAkGgR/w4sK8YPNqw0F04Xx1GQV1SNcFi5lj2xBhRI862sUUiEkUEGM8UieVMgx5pFM=,iv:qBwza6BLls0WiW2DpDkb7PIt5vpjj3LmQaArDGgRXIo=,tag:W/REzW4zCNpptvbXDVCpCA==,type:str]
+    pgp: []
+    unencrypted_suffix: _unencrypted
+    version: 3.9.4