nixconfig/modules/nixos/homelab/services.nix

# ~/nixconfig/modules.new/nixos/homelab/services.nix
{
  config,
  pkgs,
  ... 
}:

{
  arrSuite.enable = true;
  services.samba.shares.Media.path = "/media/storage/media";

  virtualisation.incus.enable = true;

  

  users.users.audiobookshelf = {
    isSystemUser = true;
    group = "media_services";
  };

  users.groups.media_services = { };

  

  services.audiobookshelf = {
    enable = true;
    user = "audiobookshelf";
    group = "media_services";
    host = "0.0.0.0";
    port = 13378;
  };

  services.netdata = {
    enable = true;
    config = {
      global = {
        "memory mode" = "ram";
        "debug log" = "none";
        "access log" = "none";
        "error log" = "syslog";
      };
    };
  };

  users.users.qbittorrent.extraGroups = [ "media_services" ];
  users.groups.qbittorrent = { };

  services.qbittorrent = {
    enable = true;
    dataDir = "/media/storage/media/downloads/";
    user = "qbittorrent";
    group = "qbittorrent";
    port = 8090;
    openFirewall = true;
    package = pkgs.qbittorrent-nox;
  };

  systemd.tmpfiles.rules = [
    "d /media/storage/media/downloads/qBittorrent 0775 root media_services - -"
    "d /storage/services/qbittorrent 0755 qbittorrent qbittorrent - -"
    "d /storage/services/qbittorrent/config 0755 qbittorrent qbittorrent - -"
  ];

  services.jellyfin.enable = true;

  services.actual = {
    enable = true;
    settings = {
      port = 5006;
    };
  };

  virtualisation.docker.enable = true;

  virtualisation.oci-containers = {
    backend = "docker";
    containers = {
      dufs = {
        image = "sigoden/dufs:latest";
        ports = [ "5000:5000" ];
        volumes = [ "/media/storage/media/:/data" ];
        cmd = [ "/data" "-A" ];
      };
      c2c-scraper = {
        image = "death916/c2cscrape:latest";
        volumes = [
          "/media/storage/media/books/audio/podcasts/C2C:/downloads"
          "/media/storage/media/docker/volumes/c2cscrape:/app/data"
        ];
        environment = { TZ = "America/Los_Angeles"; };
        autoStart = true;
        extraOptions = [ "--dns=8.8.8.8" ];
      };
      adguardhome = {
        image = "adguard/adguardhome:latest";
        autoStart = true;
        volumes = [
          "/storage/services/adguard/work:/opt/adguardhome/work"
          "/storage/services/adguard/data:/opt/adguardhome/conf"
        ];
        extraOptions = [ "--network=host" ];
      };
    };
  };

  systemd.services.kopia-backup = {
    description = "Kopia backup service for NixOS server";
    serviceConfig = {
      Type = "oneshot";
      User = "root";
      ExecStart = "/usr/local/bin/nixos-kopia-backup.sh";
      path = with pkgs; [ coreutils kopia ];
    };
  };

  systemd.timers.kopia-backup = {
    description = "Daily Kopia backup timer";
    wantedBy = [ "timers.target" ];
    partOf = [ "kopia-backup.service" ];
    timerConfig = {
      OnCalendar = "hourly";
      Persistent = true;
      Unit = "kopia-backup.service";
    };
  };

  users.users.adguardhome = {
    isSystemUser = true;
    group = "adguardhome";
    extraGroups = [ "adgaurdhome-access" ];
  };
  users.groups.adguardhome-access = { };
  users.groups.adguardhome = { };

  security.sudo.wheelNeedsPassword = true;

  environment.systemPackages = with pkgs; [
    git
    vim
    htop
    tmux
    tailscale
    lvm2
    rsync
    multipath-tools
    btop
    wget
    pkgs.jellyfin-web
    pkgs.jellyfin-ffmpeg
    pkgs.jellyfin
    unzip
    kopia
    manix
    nh
    qemu
  ];
}