]> Git — Sourcephile - sourcephile-nix.git/blob - servers/losurdo/transmission.nix
nix: use the hardened profile on mermet too
[sourcephile-nix.git] / servers / losurdo / transmission.nix
1 { pkgs, lib, config, ... }:
2 let
3 inherit (config.services) transmission;
4 inherit (config.users) users;
5 in
6 {
7 users.groups.transmission.members = [
8 users."julm".name
9 ];
10 networking.nftables.ruleset = ''
11 add rule inet filter net2fw tcp dport ${toString transmission.settings.peer-port} counter accept comment "Transmission"
12 add rule inet filter net2fw udp dport ${toString transmission.settings.peer-port} counter accept comment "Transmission"
13 add rule inet filter fw2net ip protocol udp skuid ${users.transmission.name} counter accept comment "BitTorrent"
14 '';
15 services.transmission = {
16 enable = true;
17 home = "/var/torrents";
18 downloadDirPermissions = "770";
19 settings = {
20 dht-enabled = true;
21 incomplete-dir-enabled = false;
22 peer-port = 6882;
23 peer-port-random-on-start = false;
24 port-forwarding-enabled = true;
25 preallocation = 0;
26 rpc-bind-address = "127.0.0.1";
27 rpc-enabled = true;
28 rpc-port = 9091;
29 rpc-whitelist = "127.0.0.1";
30 rpc-whitelist-enabled = true;
31 speed-limit-up = 10;
32 speed-limit-up-enabled = true;
33 };
34 };
35 }