Setup transmission

modules/services/deluge/default.nix

@@ -13,12 +13,13 @@
   };
 
   config = lib.mkIf config.chvp.services.deluge.enable {
-    chvp.services.nginx.hosts = builtins.genList
+    chvp.services.nginx.hosts = (builtins.genList
       (n: {
         fqdn = "del${toString (n + 1)}.vanpetegem.me";
         basicProxy = "http://localhost:${toString (8112 + n)}";
-      })
-      config.chvp.services.deluge.count;
+      }) config.chvp.services.deluge.count) ++ [
+        { fqdn = "transmission.vanpetegem.me"; basicProxy = "http://localhost:9091"; }
+      ];
 
     networking.firewall = {
       allowedTCPPortRanges = [
@@ -27,6 +28,30 @@
       ];
     };
 
+    services.transmission = {
+      enable = true;
+      user = "charlotte";
+      group = "users";
+      home = "/data/var/lib/transmission";
+      openRPCPort = true;
+      openPeerPorts = true;
+      credentialsFile = config.age.secrets."files/programs/transmission/config.json".path;
+      settings = {
+        umask = 18;
+        download-dir = "/srv/data";
+        rpc-authentication-required = true;
+        rpc-bind-address = "0.0.0.0";
+        rpc-enabled = true;
+        rpc-host-whitelist-enabled = false;
+        rpc-whitelist-enabled = false;
+      };
+    };
+
+    age.secrets."files/programs/transmission/config.json" = {
+      file = ../../../secrets/files/programs/transmission/config.json.age;
+      owner = "charlotte";
+    };
+
     systemd.services = builtins.foldl' (x: y: x // y) { } (builtins.genList
       (n:
         let num = toString (n + 1); in

secrets.nix

@@ -82,6 +82,8 @@ in
 
   "secrets/files/programs/ssh/host_configuration.age".publicKeys = hosts ++ users;
 
+  "secrets/files/programs/transmission/config.json.age".publicKeys = [ urithiru ] ++ users;
+
   "secrets/files/services/matrix-appservice-slack/config.yml.age".publicKeys = [ lasting-integrity ] ++ users;
   "secrets/files/services/matrix-appservice-slack/registration.yml.age".publicKeys = [ lasting-integrity ] ++ users;
   "secrets/files/services/matrix-hookshot/config.yml.age".publicKeys = [ lasting-integrity ] ++ users;

secrets/files/programs/transmission/config.json.age

@@ -0,0 +1,12 @@
+age-encryption.org/v1
+-> ssh-ed25519 9PfEBQ KOsHOp4tweYreyf3BoLb2aVUIJZAyrwp+PrWUaq6sRg
+uC+VtZiyBcmnZTxXlZ8z94kWamrowxvslnskmGujOtk
+-> ssh-ed25519 s9rb8g 56Ojmt+PJTnSwy0QngEIzXs3p3JiL6SedWVxIOvy31I
+HwGefPNgUId1lud7EGas66u4WNNVxw5St9iUjpA6wi4
+-> ssh-ed25519 yad4VQ 9/KQmUD/Mm+xsc1au0pYer1diPge6Xmw0J8bmDgoHTc
+rkd0Gn8WDw9dWt2ddlRp8/XwDujw09DXvF6JRcQOtbI
+-> X-grease O'QW_: 1]|~R5W= 19I,IA^]
+PPg4W3VuI9WVFMKdMDqYYTOaKCNN/Qa5JX0hKobyd5L94E+yJYdAQS/LedBX6ISR
+my8T/QWM0YX+ZoccL6XrMvw4Gdz576aoSa0s
+--- AteHXtSoQ9ymmax27TzVSEez+gAcQ8Gz+vryJhB77PI
+ýsMöxRïgÚÏX³o´Há7¡ÊÈH<C388>ᯣE;1p‚þ‰mS|K›º‘ÿU7fr—Æg<éqòËsº.Ò&šþ¬
¦[•mvêiX”]UoTæ´¼¡L§ÞzáAÄsJä|ÐrºcOü©ý?«öòDK¢)WÞ3