From 0b7160f2a2cdce0551801cb23e588591ee48f661 Mon Sep 17 00:00:00 2001
From: Jacob Bachmann <jacob.bachmann@posteo.de>
Date: Wed, 2 Oct 2024 22:00:20 +0200
Subject: [PATCH] feat(APPA): add media group

---
 hosts/APPA/services/jellyfin.nix  | 6 ++++--
 hosts/APPA/services/nextcloud.nix | 2 ++
 hosts/APPA/system.nix             | 4 ++++
 3 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/hosts/APPA/services/jellyfin.nix b/hosts/APPA/services/jellyfin.nix
index c52a3c6..681e4bb 100644
--- a/hosts/APPA/services/jellyfin.nix
+++ b/hosts/APPA/services/jellyfin.nix
@@ -1,11 +1,13 @@
-{ config, ... }:
+{ lib, ... }:
 {
   # HTTP Traffic: 8096
   # HTTPS Traffic: 8920
   # Service Discovery: 1900
   # Client Discovery: 7359 UDP
 
-  users.groups."${config.services.jellyfin.group}".members = [ "nextcloud" ];
+  users.groups.media.members = [ "jellyfin" ];
+
+  systemd.services.jellyfin.serviceConfig.UMask = lib.mkForce "0007";
 
   services.jellyfin = {
     enable = true;
diff --git a/hosts/APPA/services/nextcloud.nix b/hosts/APPA/services/nextcloud.nix
index f0f27f2..9a63a33 100644
--- a/hosts/APPA/services/nextcloud.nix
+++ b/hosts/APPA/services/nextcloud.nix
@@ -7,6 +7,8 @@
     group = config.users.groups.nextcloud.name;
   };
 
+  users.groups.media.members = [ "nextcloud" ];
+
   services.nextcloud = {
     enable = true;
     package = pkgs.nextcloud29;
diff --git a/hosts/APPA/system.nix b/hosts/APPA/system.nix
index bb4efad..92b8a28 100644
--- a/hosts/APPA/system.nix
+++ b/hosts/APPA/system.nix
@@ -1,3 +1,4 @@
+{ config, ... }:
 {
   bchmnn = {
     power = {
@@ -22,4 +23,7 @@
   };
 
   services.logind.lidSwitch = "ignore";
+
+  users.groups.media = { };
+  systemd.tmpfiles.rules = [ "d /var/lib/media 2750 root media" ];
 }