depot/ops/nixos/lib/content.nix

# SPDX-FileCopyrightText: 2020 Luke Granger-Brown <depot@lukegb.com>
#
# SPDX-License-Identifier: Apache-2.0

{ lib, config, ... }:
{
  config = lib.mkMerge [{
    users.users.content = {
      isSystemUser = true;
      group = "content";
    };
    users.groups.content = {};

    users.users.lukegb.extraGroups = [ "content" ];
  } (lib.mkIf config.services.nginx.enable {
    systemd.services.nginx.serviceConfig = {
      SupplementaryGroups = [ "content" ];
    };
  }) (lib.mkIf config.services.sonarr.enable {
    users.users.sonarr.extraGroups = [ "content" ];
    systemd.services.sonarr.serviceConfig = {
      UMask = "0002";
      Group = lib.mkForce "content";
    };
  }) (lib.mkIf config.services.radarr.enable {
    users.users.radarr.extraGroups = [ "content" ];
    systemd.services.radarr.serviceConfig = {
      UMask = "0002";
      Group = lib.mkForce "content";
    };
  }) (lib.mkIf config.services.deluge.enable {
    users.users.deluge.extraGroups = [ "content" ];

    systemd.services.deluged.serviceConfig = {
      UMask = "0002";
      Group = lib.mkForce "content";
    };
  })];
}