From 7c6601e42e231176bcbab0fadf8d157e1c63dce4 Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 6 Mar 2022 11:38:51 -0800
Subject: nas: install transmission

Create a user and group 'nas' so we can run tranmission in it. This will
also help us to enable some specific permissions on some directories.
---
 hosts/common/nas.nix                 |  8 ++++++++
 hosts/common/server/transmission.nix | 28 ++++++++++++++++++++++++++++
 2 files changed, 36 insertions(+)
 create mode 100644 hosts/common/server/transmission.nix

(limited to 'hosts')

diff --git a/hosts/common/nas.nix b/hosts/common/nas.nix
index 0554d40..4b41e64 100644
--- a/hosts/common/nas.nix
+++ b/hosts/common/nas.nix
@@ -7,5 +7,13 @@
     ./server/prometheus.nix
     ./server/grafana.nix
     ./server/traefik.nix
+    ./server/transmission.nix
   ];
+
+  users.groups.nas.gid = 5000;
+  users.users.nas = {
+    uid = 5000;
+    group = "nas";
+    isSystemUser = true;
+  };
 }
diff --git a/hosts/common/server/transmission.nix b/hosts/common/server/transmission.nix
new file mode 100644
index 0000000..b32697e
--- /dev/null
+++ b/hosts/common/server/transmission.nix
@@ -0,0 +1,28 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.transmission = {
+    enable = true;
+    group = "nas";
+    performanceNetParameters = true;
+    home = "/data/fast/torrents";
+    settings = {
+      dht-enabled = false;
+      cache-size-mb = 128;
+      peer-port = 52213;
+      peer-port-random-low = 49152;
+      peer-port-random-high = 65535;
+      message-level = 2;
+
+      rpc-enabled = true;
+      rpc-whitelist-enabled = true;
+      rpc-whitelist = "127.0.0.1";
+      verify-threads = 4;
+    };
+  };
+
+  networking.firewall = {
+    allowedTCPPorts = [ 52213 ];
+    allowedUDPPorts = [ 52213 ];
+  };
+}
-- 
cgit 1.4.1