62 lines
1.5 KiB
Nix
62 lines
1.5 KiB
Nix
{ config, lib, pkgs, ... }:
|
|
|
|
with import <stockholm/lib>;
|
|
|
|
let
|
|
basicAuth = import <torrent-secrets/auth.nix>;
|
|
peer-port = 51412;
|
|
web-port = 8112;
|
|
daemon-port = 58846;
|
|
base-dir = config.krebs.rtorrent.workDir;
|
|
in {
|
|
|
|
users.users = {
|
|
download = {
|
|
name = "download";
|
|
home = base-dir;
|
|
uid = mkDefault (genid "download");
|
|
createHome = true;
|
|
useDefaultShell = true;
|
|
group = "download";
|
|
openssh.authorizedKeys.keys = [ ];
|
|
};
|
|
};
|
|
|
|
users.extraGroups = {
|
|
download = {
|
|
gid = lib.mkDefault (genid "download");
|
|
members = [
|
|
config.krebs.build.user.name
|
|
"download"
|
|
"rtorrent"
|
|
"nginx"
|
|
];
|
|
};
|
|
rtorrent.members = [ "download" ];
|
|
};
|
|
|
|
krebs.rtorrent = {
|
|
enable = true;
|
|
web = {
|
|
enable = true;
|
|
port = web-port;
|
|
inherit basicAuth;
|
|
};
|
|
rutorrent.enable = true;
|
|
enableXMLRPC = true;
|
|
listenPort = peer-port;
|
|
downloadDir = config.makefu.dl-dir;
|
|
# dump old torrents into watch folder to have them re-added
|
|
};
|
|
|
|
services.nginx.virtualHosts."torrent.${config.krebs.build.host.name}.r".locations."/" = { proxyPass = "http://localhost:${toString web-port}/"; };
|
|
|
|
networking.firewall.extraCommands = ''
|
|
iptables -A INPUT -i retiolum -p tcp --dport ${toString web-port} -j ACCEPT
|
|
'';
|
|
|
|
networking.firewall.allowedTCPPorts = [ peer-port ];
|
|
networking.firewall.allowedUDPPorts = [ peer-port ];
|
|
state = [ config.krebs.rtorrent.sessionDir ]; # state which torrents were loaded
|
|
}
|