chris/sneeuwvlok
chris/sneeuwvlok
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

checkpoint

Browse source
This commit is contained in:
Chris Kruining 2026-03-31 15:43:34 +02:00
parent cb30a0ba8b
commit cc86b0a815
No known key found for this signature in database
GPG key ID: EB894A3560CCCAD2
59 changed files with 834 additions and 123 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.just/vars.just
View file

@ -1,8 +1,8 @@
set unstable := true
set quiet := true
machine_base_path := justfile_directory() + "/../machines"
secret_base_path := justfile_directory() + "/../systems/x86_64-linux"
machine_base_path := justfile_directory() + "/machines"
secret_base_path := justfile_directory() + "/systems/x86_64-linux"
_default:
just --list vars

28
clan.nix
View file

@ -81,5 +81,33 @@
share = true;
};
};
servarr = {
module.name = "servarr";
module.input = "self";
roles.default.machines.ulmo.settings = {};
roles.default.settings = {
enable = true;
services = {
sonarr = {
rootFolders = [
"/var/media/series"
];
};
radarr = {
rootFolders = [
"/var/media/movies"
];
};
lidarr = {
rootFolders = [
"/var/media/music"
];
};
prowlarr = {};
};
};
};
};
}

0
clanServices/caddy/README.md Normal file
View file

23
clanServices/caddy/default.nix Normal file
View file

@ -0,0 +1,23 @@
{...}: {
_class = "clan.service";
manifest = {
name = "arda/caddy";
description = ''
Configuration of reverse proxy.
'';
categories = [ "Service", "Media" ];
readme = builtins.readFile ./README.md
};
roles.default = {
description = '''';
interface = {...}: {
options = {};
};
perInstance = {...}: {
nixosModule = {...}: {};
};
};
}

13
clanServices/caddy/flake-module.nix Normal file
View file

@ -0,0 +1,13 @@
{...}: let
module = ./default.nix;
in {
clan.modules.caddy = module;
# perSystem = {...}: {
# clan.nixosTests.caddy = {
# imports = [];
# clan.modules."@arda/caddy" = module;
# };
# };
}

23
clanServices/flake-module.nix
View file

@ -1,8 +1,19 @@
{...}: {
imports = ./.
{lib, ...}: {
imports =
./.
|> builtins.readDir
|> builtins.attrsToList
|> builtins.map ({ name, value }: { type = value; path = ./. "/${name}/flake-module.nix" })
|> builtins.filter ({ type, path }: type == "directory" && (builtins.pathExists path))
|> builtins.map ({ name }: name);
|> lib.attrsToList
|> builtins.map ({
name,
value,
}: {
type = value;
path = ./. + "/${name}/flake-module.nix";
})
|> builtins.filter ({
type,
path,
}:
type == "directory" && (builtins.pathExists path))
|> builtins.map ({path, ...}: path);
}

0
clanServices/peristance/README.md Normal file
View file

24
clanServices/peristance/default.nix Normal file
View file

@ -0,0 +1,24 @@
{...}: {
_class = "clan.service";
manifest = {
name = "arda/persistance";
description = ''
Configuration of persistance resrouce(s)
(for now this means a database. and specifically it means postgres)
'';
categories = [ "Service", "Peristance" ];
readme = builtins.readFile ./README.md
};
roles.default = {
description = '''';
interface = {...}: {
options = {};
};
perInstance = {...}: {
nixosModule = {...}: {};
};
};
}

13
clanServices/peristance/flake-module.nix Normal file
View file

@ -0,0 +1,13 @@
{...}: let
module = ./default.nix;
in {
clan.modules.peristance = module;
# perSystem = {...}: {
# clan.nixosTests.peristance = {
# imports = [];
# clan.modules."@arda/peristance" = module;
# };
# };
}

0
clanServices/servarr/README.md Normal file
View file

121
clanServices/servarr/default.nix Normal file
View file

@ -0,0 +1,121 @@
{lib, ...}: {
_class = "clan.service";
manifest = {
name = "arda/servarr";
description = '''';
categories = ["Service" "Media"];
readme = builtins.readFile ./README.md;
# exports.out = [];
};
# exports = {};
roles.default = {
description = '''';
interface = {lib, ...}: let
inherit (lib) mkOption mkEnableOption types;
in {
options = {
enable = mkEnableOption "Enable configured *arr services";
services = mkOption {
type = types.attrsOf (types.submodule ({name, ...}: {
options = {
enable = mkEnableOption "Enable ${name}";
debug = mkEnableOption "Use tofu plan instead of tofu apply for ${name} ";
rootFolders = mkOption {
type = types.listOf types.str;
default = [];
};
};
}));
default = {};
description = ''
Settings foreach *arr service
'';
};
};
};
perInstance = {
instanceName,
settings,
machine,
roles,
...
}: {
nixosModule = args @ {
config,
lib,
pkgs,
...
}: let
servarr = import ./lib.nix (args // {inherit settings;});
services = settings.services |> lib.attrNames;
service_count = services |> lib.length;
in {
imports = [
(import ./sabnzbd.nix (args
// {
inherit settings;
port = 2000 + service_count + 1;
}))
(import ./qbittorrent.nix (args
// {
inherit settings;
port = 2000 + service_count + 2;
}))
(servarr.createModule settings.services)
];
config = {
clan.core.vars.generators.servarr = rec {
dependencies =
services ++ ["sabnzbd" "qbittorrent"];
files."config.tfvars" = {
owner = "media";
group = "media";
mode = "0440";
restartUnits = services |> lib.map (s: "${s}.service");
};
script = ''
cat << EOL > $out/config.tfvars
${
services
|> lib.map (s: "${s}_api_key = \"$(cat $in/${s}/api_key)\"")
|> lib.join "\n"
}
qbittorrent_api_key = "$(cat $in/qbittorrent/password)"
sabnzbd_api_key = "$(cat $in/sabnzbd/api_key)"
EOL
'';
};
services = {
flaresolverr = {
enable = true;
openFirewall = true;
port = 2000 + service_count + 3;
};
postgresql = {
ensureDatabases = services;
ensureUsers =
services
|> lib.map (service: {
name = service;
ensureDBOwnership = true;
});
};
};
};
};
};
};
perMachine = {...}: {
};
}

14
clanServices/servarr/flake-module.nix
View file

@ -1 +1,13 @@
{...}: {}
{...}: let
module = ./default.nix;
in {
clan.modules.servarr = module;
# perSystem = {...}: {
# clan.nixosTests.servarr = {
# imports = [];
# clan.modules."@arda/servarr" = module;
# };
# };
}

317
clanServices/servarr/lib.nix Normal file
View file

@ -0,0 +1,317 @@
{
self,
config,
lib,
pkgs,
settings,
...
}: let
inherit (lib) mkIf;
createGenerator = {
service,
service_options,
...
}: {
files = {
api_key = {
secret = true;
deploy = true;
owner = service;
group = "media";
restartUnits = ["${service}.service"];
};
"config.env" = {
secret = true;
deploy = true;
owner = service;
group = "media";
restartUnits = ["${service}.service"];
};
};
runtimeInputs = with pkgs; [pwgen];
script = ''
pwgen -s 128 1 > $out/api_key
echo ${lib.toUpper service}__AUTH__APIKEY="$(cat $out/api_key)" > $out/config.env
'';
};
createService = {
service,
service_options,
...
}:
{
enable = true;
openFirewall = true;
environmentFiles = [
config.clan.core.vars.generators.${service}.files."config.env".path
];
settings = {
auth.authenticationMethod = "External";
server = {
bindaddress = "0.0.0.0";
port = service_options.port;
};
postgres = {
host = "localhost";
port = "5432";
user = service;
maindb = service;
logdb = service;
};
};
}
// (lib.optionalAttrs (lib.elem service ["radarr" "sonarr" "lidarr" "whisparr"]) {
user = service;
group = "media";
});
createSystemdService = {
service,
service_options,
...
}: let
tofu = lib.getExe pkgs.opentofu;
terraformConfiguration = self.inputs.terranix.lib.terranixConfiguration {
system = pkgs.stdenv.hostPlatform.system;
modules = [
(createInfra {inherit service service_options;})
];
};
in {
description = "${service} apply infra";
wantedBy = ["multi-user.target"];
wants = ["${service}.service"];
preStart = ''
install -d -m 0770 -o ${service} -g media /var/lib/${service}-apply-infra
${
service_options.rootFolders
|> lib.map (folder: "install -d -m 0770 -o media -g media ${folder}")
|> lib.join "\n"
}
'';
script = ''
# Sleep for a bit to give the service a chance to start up
sleep 5s
if [ "$(systemctl is-active ${lib.escapeShellArg service})" != "active" ]; then
echo "${service} is not running"
exit 1
fi
# Print the path to the source for easier debugging
echo "config location: ${terraformConfiguration}"
# Copy infra code into workspace
cp -f ${terraformConfiguration} config.tf.json
# Initialize OpenTofu
${tofu} init
# Run the infrastructure code
${tofu} \
${
if service_options.debug
then "plan"
else "apply -auto-approve"
} \
-var-file='${config.clan.core.vars.generators.servarr.files."config.tfvars".path}'
'';
serviceConfig = {
Type = "oneshot";
User = service;
Group = "media";
WorkingDirectory = "/var/lib/${service}-apply-infra";
EnvironmentFile = [
config.clan.core.vars.generators.${service}.files."config.env".path
];
};
};
# Returns a module to be used in a modules list of terranix
createInfra = {
service,
service_options,
...
}: terra: let
inherit (terra.lib) tfRef;
in {
variable = {
"${service}_api_key" = {
type = "string";
description = "${service} API key";
};
qbittorrent_api_key = {
type = "string";
description = "qbittorrent api key";
};
sabnzbd_api_key = {
type = "string";
description = "sabnzbd api key";
};
};
terraform.required_providers.${service} = {
source = "devopsarr/${service}";
version =
{
radarr = "2.3.5";
sonarr = "3.4.2";
prowlarr = "3.2.1";
lidarr = "1.13.0";
readarr = "2.1.0";
whisparr = "1.2.0";
}.${
service
};
};
provider.${service} = {
url = "http://[::1]:${toString service_options.port}";
api_key = tfRef "var.${service}_api_key";
};
resource =
{
"${service}_root_folder" = mkIf (lib.elem service ["radarr" "sonarr" "whisparr" "readarr"]) (
service_options.rootFolders
|> lib.imap (i: f: lib.nameValuePair "local${toString i}" {path = f;})
|> lib.listToAttrs
);
"${service}_download_client_qbittorrent" = mkIf (lib.elem service ["radarr" "sonarr" "lidarr" "whisparr"]) {
"main" = {
name = "qBittorrent";
enable = true;
priority = 1;
host = "localhost";
username = "admin";
password = tfRef "var.qbittorrent_api_key";
url_base = "/";
port = config.services.qbittorrent.webuiPort;
};
};
"${service}_download_client_sabnzbd" = mkIf (lib.elem service ["radarr" "sonarr" "lidarr" "whisparr"]) {
"main" = {
name = "SABnzbd";
enable = true;
priority = 1;
host = "localhost";
api_key = tfRef "var.sabnzbd_api_key";
url_base = "/";
port = config.services.sabnzbd.settings.misc.port;
};
};
}
// (lib.optionalAttrs (service == "prowlarr") (
settings.services
|> lib.filterAttrs (s: _: lib.elem s ["radarr" "sonarr" "lidarr" "whisparr"])
|> lib.mapAttrsToList (s: {port, ...}: {
"prowlarr_application_${s}"."main" = let
p = config.services.prowlarr.settings.server.port or 9696;
in {
name = s;
sync_level = "addOnly";
base_url = "http://localhost:${toString port}";
prowlarr_url = "http://localhost:${toString p}";
api_key = tfRef "var.${s}_api_key";
};
})
|> lib.concat [
{
"prowlarr_indexer" = {
"nyaa" = {
enable = true;
app_profile_id = 1;
priority = 1;
name = "Nyaa";
implementation = "Cardigann";
config_contract = "CardigannSettings";
protocol = "torrent";
fields = [
{
name = "definitionFile";
text_value = "nyaasi";
}
{
name = "baseSettings.limitsUnit";
number_value = 0;
}
{
name = "torrentBaseSettings.preferMagnetUrl";
bool_value = false;
}
{
name = "prefer_magnet_links";
bool_value = true;
}
{
name = "sonarr_compatibility";
bool_value = false;
}
{
name = "strip_s01";
bool_value = false;
}
{
name = "radarr_compatibility";
bool_value = false;
}
{
name = "filter-id";
number_value = 0;
}
{
name = "cat-id";
number_value = 0;
}
{
name = "sort";
number_value = 0;
}
{
name = "type";
number_value = 1;
}
];
};
};
}
]
|> lib.mkMerge
));
};
in {
createModule = services: {...}: {
config =
services
|> lib.attrsToList
|> lib.imap1 (i: service: o: let
service_options = o // {port = 2000 + i;};
in {
clan.core.vars.generators.${service} = createGenerator {inherit service service_options;};
services.${service} = createService {inherit service service_options;};
systemd.services."${service}-apply-infra" = lib.mkIf settings.enable (createSystemdService {inherit service service_options;});
})
|> lib.mkMerge;
};
}

96
clanServices/servarr/qbittorrent.nix Normal file
View file

@ -0,0 +1,96 @@
{
config,
pkgs,
lib,
settings,
port,
...
}: {
clan.core.vars.generators.qbittorrent = let
hash_password = pkgs.writers.writePython3 "hashPassword" {} ''
import base64
import hashlib
import sys
import uuid
password = sys.argv[1]
salt = uuid.uuid4()
salt_bytes = salt.bytes
password = str.encode(password)
hashed_password = hashlib.pbkdf2_hmac(
"sha512",
password,
salt_bytes,
100000,
dklen=64
)
b64_salt = base64.b64encode(salt_bytes).decode("utf-8")
b64_password = base64.b64encode(hashed_password).decode("utf-8")
password_string = "@ByteArray({salt}:{password})".format(
salt=b64_salt, password=b64_password
)
print(password_string)
'';
in {
files = {
"password" = {
secret = true;
deploy = true;
};
"password_hash" = {
secret = true;
deploy = true;
};
"qBittorrent.conf" = {
secret = true;
deploy = true;
owner = "qbittorrent";
group = "media";
mode = "0660";
restartUnits = ["qbittorrent.service"];
};
};
runtimeInputs = with pkgs; [pwgen hash_password];
script = ''
pwgen -s 128 1 > $out/password
${hash_password} $(cat $out/password) > $out/password_hash
cat << EOF > $out/qBittorrent.conf
[LegalNotice]
Accepted=true
[Preferences]
WebUI\AlternativeUIEnabled=true
WebUI\RootFolder=${pkgs.vuetorrent}/share/vuetorrent
WebUI\Username=admin
WebUI\Password_PBKDF2=$(cat $out/password_hash)
EOF
'';
};
system.activationScripts.qbittorrent-config = {
deps = lib.optional (!config.sops.useSystemdActivation) "setupSecrets";
# TODO: If sops-nix is switched to systemd activation, add a systemd unit
# for this install step that runs after sops-install-secrets.service,
# because this activation-script dependency only orders against setupSecrets.
text = ''
install -Dm0600 -o ${config.services.qbittorrent.user} -g ${config.services.qbittorrent.group} \
${config.clan.core.vars.generators.qbittorrent.files."qBittorrent.conf".path} \
${config.services.qbittorrent.profileDir}/qBittorrent/config/qBittorrent.conf
'';
};
services.qbittorrent = {
enable = true;
openFirewall = true;
webuiPort = port;
serverConfig = lib.mkForce {};
user = "qbittorrent";
group = "media";
};
}

95
clanServices/servarr/sabnzbd.nix Normal file
View file

@ -0,0 +1,95 @@
{
config,
lib,
pkgs,
settings,
port,
...
}: {
clan.core.vars.generators.sabnzbd = {
files = {
"api_key" = {
secret = true;
deploy = true;
};
"nzb_key" = {
secret = true;
deploy = true;
};
"config.ini" = {
secret = true;
deploy = true;
owner = "sabnzbd";
group = "media";
mode = "0660";
};
};
prompts = {
username = {
description = "usenet username";
type = "hidden";
persist = true;
};
password = {
description = "usenet password";
type = "hidden";
persist = true;
};
};
runtimeInputs = with pkgs; [pwgen];
script = ''
pwgen -s 128 1 > $out/api_key
pwgen -s 128 1 > $out/nzb_key
cat << EOF > $out/config.ini
[misc]
api_key = $(cat $out/api_key)
nzb_key = $(cat $out/nzb_key)
[servers]
[[news.sunnyusenet.com]]
username = $(cat $prompts/username)
password = $(cat $prompts/password)
EOF
'';
};
services.sabnzbd = {
enable = true;
openFirewall = true;
allowConfigWrite = false;
configFile = lib.mkForce null;
secretFiles = [
config.clan.core.vars.generators.sabnzbd.files."config.ini".path
];
settings = {
misc = {
host = "0.0.0.0";
port = port;
host_whitelist = "${config.networking.hostName}";
download_dir = "/var/media/downloads/incomplete";
complete_dir = "/var/media/downloads/done";
};
servers = {
"news.sunnyusenet.com" = {
name = "news.sunnyusenet.com";
displayname = "news.sunnyusenet.com";
host = "news.sunnyusenet.com";
port = 563;
timeout = 60;
};
};
};
user = "sabnzbd";
group = "media";
};
}

25
flake.lock generated
View file

@ -351,27 +351,6 @@
"type": "github"
}
},
"flake-parts_5": {
"inputs": {
"nixpkgs-lib": [
"terranix",
"nixpkgs"
]
},
"locked": {
"lastModified": 1736143030,
"narHash": "sha256-+hu54pAoLDEZT9pjHlqL9DNzWz0NbUn8NEAHP7PQPzU=",
"owner": "hercules-ci",
"repo": "flake-parts",
"rev": "b905f6fc23a9051a6e1b741e1438dbfc0634c6de",
"type": "github"
},
"original": {
"owner": "hercules-ci",
"repo": "flake-parts",
"type": "github"
}
},
"flux": {
"inputs": {
"mcman": "mcman",
@ -1091,7 +1070,9 @@
},
"terranix": {
"inputs": {
"flake-parts": "flake-parts_5",
"flake-parts": [
"flake-parts"
],
"nixpkgs": [
"nixpkgs"
],

12
flake.nix
View file

@ -27,6 +27,12 @@
inputs.nixpkgs.follows = "nixpkgs";
};
terranix = {
url = "github:terranix/terranix";
inputs.nixpkgs.follows = "nixpkgs";
inputs.flake-parts.follows = "flake-parts";
};
clan-core = {
url = "https://git.clan.lol/clan/clan-core/archive/main.tar.gz";
inputs = {
@ -83,11 +89,6 @@
url = "github:vinceliuice/grub2-themes";
};
terranix = {
url = "github:terranix/terranix";
inputs.nixpkgs.follows = "nixpkgs";
};
mydia = {
url = "github:chris-kruining/mydia";
# url = "github:getmydia/mydia";
@ -108,7 +109,6 @@
flake-parts.flakeModules.modules
clan-core.flakeModules.default
home-manager.flakeModules.default
terranix.flakeModule
./packages/flake-module.nix
./clanServices/flake-module.nix
];

11
machines/mandos/configuration.nix
View file

@ -1,8 +1,15 @@
{ ... }:
{
{self, ...}: {
imports = [
./disks.nix
./hardware.nix
self.inputs.home-manager.nixosModules.home-manager
self.inputs.himmelblau.nixosModules.himmelblau
self.inputs.jovian.nixosModules.default
self.inputs.mydia.nixosModules.default
self.inputs.nix-minecraft.nixosModules.minecraft-servers
self.inputs.nvf.nixosModules.default
self.inputs.sops-nix.nixosModules.sops
(self.inputs.import-tree ../../modules/nixos)
];
nixpkgs.hostPlatform = "x86_64-linux";

14
machines/orome/configuration.nix
View file

@ -1,7 +1,19 @@
{pkgs, ...}: {
{
self,
pkgs,
...
}: {
imports = [
./disks.nix
./hardware.nix
self.inputs.home-manager.nixosModules.home-manager
self.inputs.himmelblau.nixosModules.himmelblau
self.inputs.jovian.nixosModules.default
self.inputs.mydia.nixosModules.default
self.inputs.nix-minecraft.nixosModules.minecraft-servers
self.inputs.nvf.nixosModules.default
self.inputs.sops-nix.nixosModules.sops
(self.inputs.import-tree ../../modules/nixos)
];
nixpkgs.hostPlatform = "x86_64-linux";

11
machines/tulkas/configuration.nix
View file

@ -1,8 +1,15 @@
{ ... }:
{
{self, ...}: {
imports = [
./disks.nix
./hardware.nix
self.inputs.home-manager.nixosModules.home-manager
self.inputs.himmelblau.nixosModules.himmelblau
self.inputs.jovian.nixosModules.default
self.inputs.mydia.nixosModules.default
self.inputs.nix-minecraft.nixosModules.minecraft-servers
self.inputs.nvf.nixosModules.default
self.inputs.sops-nix.nixosModules.sops
(self.inputs.import-tree ../../modules/nixos)
];
nixpkgs.hostPlatform = "x86_64-linux";

60
machines/ulmo/configuration.nix
View file

@ -223,39 +223,39 @@
media.mydia.enable = true;
media.nfs.enable = true;
media.jellyfin.enable = true;
media.servarr = {
radarr = {
enable = true;
port = 2001;
rootFolders = [
"/var/media/movies"
];
};
# media.servarr = {
# radarr = {
# enable = true;
# port = 2001;
# rootFolders = [
# "/var/media/movies"
# ];
# };
sonarr = {
enable = true;
# sonarr = {
# enable = true;
# # debug = true;
# port = 2002;
# rootFolders = [
# "/var/media/series"
# ];
# };
# lidarr = {
# enable = true;
# debug = true;
port = 2002;
rootFolders = [
"/var/media/series"
];
};
# port = 2003;
# rootFolders = [
# "/var/media/music"
# ];
# };
lidarr = {
enable = true;
debug = true;
port = 2003;
rootFolders = [
"/var/media/music"
];
};
prowlarr = {
enable = true;
# debug = true;
port = 2004;
};
};
# prowlarr = {
# enable = true;
# # debug = true;
# port = 2004;
# };
# };
observability = {
grafana.enable = true;

1
vars/per-machine/ulmo/lidarr/api_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/lidarr/api_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/lidarr/config.env/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/lidarr/config.env/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/prowlarr/api_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/prowlarr/api_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/prowlarr/config.env/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/prowlarr/config.env/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/qbittorrent/password/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/qbittorrent/password/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/qbittorrent/password_hash/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/qbittorrent/password_hash/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/qbittorrent/qBittorrent.conf/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/qbittorrent/qBittorrent.conf/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/radarr/api_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/radarr/api_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/radarr/config.env/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/radarr/config.env/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/api_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sabnzbd/api_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/config.ini/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sabnzbd/config.ini/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/nzb_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sabnzbd/nzb_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/password/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sabnzbd/password/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/sabnzbd.ini/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

14
vars/per-machine/ulmo/sabnzbd/sabnzbd.ini/secret
View file

@ -1,14 +0,0 @@
{
"data": "ENC[AES256_GCM,data:SQ==,iv:TA3yzuzlV904alF4FJYea1hDfCUhTorWde9i2+Wjni8=,tag:llIJD9Y4R+7eLKzICX+2eQ==,type:str]",
"sops": {
"age": [
{
"recipient": "age19qfpf980tadguqq44zf6xwvjvl428dyrj46ha3n6aeqddwhtnuqqml7etq",
"enc": "-----BEGIN AGE ENCRYPTED FILE-----\nYWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSAzcEJUS3M4SWdZUVloNVNQ\nS042WFRFQ3JPK1AvRTA3U3NXeENuRVpYRFNFCmFUdGFocGI3T1hzdm5SdGhvVkg2\nMEczL1E5dW1RU2xKZnpBSXBTNGExL1UKLS0tIGhMT1h1THNIOVljQnd2emJzcEJV\nQkZkVXVNZjdsRDU4cHU5a25rVndHTEkKQSkpEgtAxwO1kCYU+G+3YwrT57Z5I25v\ndLN9BD2kQMb7wyK7tyzGi34p/gQRAd27YS5eohz4NA1DCtrG+AHkAw==\n-----END AGE ENCRYPTED FILE-----\n"
}
],
"lastmodified": "2026-03-30T12:24:25Z",
"mac": "ENC[AES256_GCM,data:bcdmlYkslq2A9fVsKI0tZ/kQZqfona6caLUCHmWV3BzxjwsUE4pYe/1hOWn+C7Gw59YhccscvTMQM9VVYYmpr8aubO8VNsnix6PkyYLlof94aTFm0QZOGTdgIe9JCiAfYCvEBiS3VowhyLKj2zdxKJhCqfsFccpmC3XAV6zJS7s=,iv:97dmBjBcBwvnWDLE1rXeZLCqEuDuGLxiPoaQz/O3Dgg=,tag:1F0bhzmPqNV9q98ceSGlkg==,type:str]",
"version": "3.12.1"
}
}

1
vars/per-machine/ulmo/sabnzbd/sabnzbd.ini/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sabnzbd/username/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sabnzbd/username/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/servarr/config.tfvars/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/servarr/config.tfvars/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sonarr/api_key/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sonarr/api_key/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/sonarr/config.env/machines/ulmo
View file

@ -1 +0,0 @@
../../../../../../sops/machines/ulmo

1
vars/per-machine/ulmo/sonarr/config.env/users/chris
View file

@ -1 +0,0 @@
../../../../../../sops/users/chris

1
vars/per-machine/ulmo/state-version/version/value Normal file
View file

@ -0,0 +1 @@
23.11