services: transmission: more configurable settings
All checks were successful
continuous-integration/drone/push Build is passing

This commit is contained in:
Bruno BELANYI 2021-03-07 16:04:45 +00:00
parent 1810d44587
commit aa0a3bf6c9

View file

@ -9,26 +9,44 @@ let
domain = config.networking.domain; domain = config.networking.domain;
webuiDomain = "transmission.${domain}"; webuiDomain = "transmission.${domain}";
transmissionRpcPort = 9091;
transmissionPeerPort = 30251;
downloadBase = "/data/downloads/"; # NOTE: to be excluded from backups
in in
{ {
options.my.services.transmission = with lib; { options.my.services.transmission = with lib; {
enable = mkEnableOption "Transmission torrent client"; enable = mkEnableOption "Transmission torrent client";
username = mkOption { username = mkOption {
type = types.str; type = types.str;
default = "Ambroisie"; default = "Ambroisie";
example = "username"; example = "username";
description = "Name of the transmission RPC user"; description = "Name of the transmission RPC user";
}; };
password = mkOption { password = mkOption {
type = types.str; type = types.str;
example = "password"; example = "password";
description = "Password of the transmission RPC user"; description = "Password of the transmission RPC user";
}; };
downloadBase = mkOption {
type = types.str;
default = "/data/downloads/";
example = "/var/lib/transmission/download";
description = "Download base directory";
};
privatePort = mkOption {
type = types.port;
default = 9091;
example = 8080;
description = "Internal port for webui";
};
peerPort = mkOption {
type = types.port;
default = 30251;
example = 32323;
description = "Peering port";
};
}; };
config = lib.mkIf cfg.enable { config = lib.mkIf cfg.enable {
@ -39,13 +57,13 @@ in
downloadDirPermissions = "775"; downloadDirPermissions = "775";
settings = { settings = {
download-dir = "${downloadBase}/complete"; download-dir = "${cfg.downloadBase}/complete";
incomplete-dir = "${downloadBase}/incomplete"; incomplete-dir = "${cfg.downloadBase}/incomplete";
peer-port = transmissionPeerPort; peer-port = cfg.peerPort;
rpc-enabled = true; rpc-enabled = true;
rpc-port = transmissionRpcPort; rpc-port = cfg.privatePort;
rpc-authentication-required = true; rpc-authentication-required = true;
rpc-username = cfg.username; rpc-username = cfg.username;
@ -63,12 +81,12 @@ in
forceSSL = true; forceSSL = true;
useACMEHost = domain; useACMEHost = domain;
locations."/".proxyPass = "http://localhost:${toString transmissionRpcPort}"; locations."/".proxyPass = "http://localhost:${toString cfg.privatePort}";
}; };
networking.firewall = { networking.firewall = {
allowedTCPPorts = [ transmissionPeerPort ]; allowedTCPPorts = [ cfg.peerPort ];
allowedUDPPorts = [ transmissionPeerPort ]; allowedUDPPorts = [ cfg.peerPort ];
}; };
}; };
} }