Basic Setup Example¶

{
  sops.secrets = {
    "sonarr/api_key" = {};
    "sonarr/password" = {};
    "radarr/api_key" = {};
    "radarr/password" = {};
    "lidarr/api_key" = {};
    "lidarr/password" = {};
    "prowlarr/api_key" = {};
    "prowlarr/password" = {};
    "indexer-api-keys/DrunkenSlug" = {};
    "indexer-api-keys/NZBFinder" = {};
    "indexer-api-keys/NzbPlanet" = {};
    "jellyfin/alice_password" = {};
    "jellyseerr/api_key" = {};
    "mullvad-account-number" = {};
    "sabnzbd/api_key" = {};
    "sabnzbd/nzb_key" = {};
    "usenet/eweka/username" = {};
    "usenet/eweka/password" = {};
    "usenet/newsgroupdirect/username" = {};
    "usenet/newsgroupdirect/password" = {};
  };

  nixflix = {
    enable = true;
    mediaDir = "/data/media";
    stateDir = "/data/.state";
    mediaUsers = ["myuser"];

    theme = {
      enable = true;
      name = "overseerr";
    };

    nginx = {
      enable = true;
      addHostsEntries = true; # Disable this is you have your own DNS configuration
    };

    postgres.enable = true;

    sonarr = {
      enable = true;
      config = {
        apiKey = {_secret = config.sops.secrets."sonarr/api_key".path;};
        hostConfig.password = {_secret = config.sops.secrets."sonarr/password".path;};
      };
    };

    radarr = {
      enable = true;
      config = {
        apiKey = {_secret = config.sops.secrets."radarr/api_key".path;};
        hostConfig.password = {_secret = config.sops.secrets."radarr/password".path;};
      };
    };

    recyclarr = {
      enable = true;
      cleanupUnmanagedProfiles = true;
    };

    lidarr = {
      enable = true;
      config = {
        apiKey = {_secret = config.sops.secrets."lidarr/api_key".path;};
        hostConfig.password = {_secret = config.sops.secrets."lidarr/password".path;};
      };
    };

    prowlarr = {
      enable = true;
      config = {
        apiKey = {_secret = config.sops.secrets."prowlarr/api_key".path;};
        hostConfig.password = {_secret = config.sops.secrets."prowlarr/password".path;};
        indexers = [
          {
            name = "DrunkenSlug";
            apiKey = {_secret = config.sops.secrets."indexer-api-keys/DrunkenSlug".path;};
          }
          {
            name = "NZBFinder";
            apiKey = {_secret = config.sops.secrets."indexer-api-keys/NZBFinder".path;};
          }
          {
            name = "NzbPlanet";
            apiKey = {_secret = config.sops.secrets."indexer-api-keys/NzbPlanet".path;};
          }
        ];
      };
    };

    sabnzbd = {
      enable = true;

      settings = {
        misc = {
          api_key = {_secret = config.sops.secrets."sabnzbd/api_key".path;};
          nzb_key = {_secret = config.sops.secrets."sabnzbd/nzb_key".path;};
        };

        servers = [
          {
            name = "Eweka";
            host = "sslreader.eweka.nl";
            port = 563;
            # Secrets use { _secret = /path; } syntax
            username = {_secret = config.sops.secrets."usenet/eweka/username".path;};
            password = {_secret = config.sops.secrets."usenet/eweka/password".path;};
            connections = 20;
            ssl = true;
            priority = 0;
            retention = 3000;
          }
          {
            name = "NewsgroupDirect";
            host = "news.newsgroupdirect.com";
            port = 563;
            username = {_secret = config.sops.secrets."usenet/newsgroupdirect/username".path;};
            password = {_secret = config.sops.secrets."usenet/newsgroupdirect/password".path;};
            connections = 10;
            ssl = true;
            priority = 1;
            optional = true;
            backup = true;
          }
        ];
      };
    };

    jellyfin = {
      enable = true;
      users = {
        alice = {
          mutable = false;
          policy.isAdministrator = true;
          password = {_secret = config.sops.secrets."jellyfin/alice_password".path;};
        };
      };
    };

    jellyseerr = {
      enable = true;
      apiKey = {_secret = config.sops.secrets."jellyseerr/api_key".path;};
    };

    mullvad = {
      enable = true;
      accountNumber = {_secret = config.sops.secrets.mullvad-account-number.path;};
      location = ["us" "nyc"];
      dns = [
        "94.140.14.14"
        "94.140.15.15"
        "76.76.2.2"
        "76.76.10.2"
      ];
      killSwitch = {
        enable = true;
        allowLan = true;
      };
    };
  };
}