Nix Podman Stacks
Search K

Appearance

streaming ​

Full streaming and automation stack containing:

By default, the following services are enabled:

  • Gluetun
  • qBittorrent
  • Sonarr
  • Radarr
  • Bazarr
  • Prowlarr

Additionally, the following services can be enabled (disabled by default):

  • Seerr
  • qui
  • Profilarr

Examples ​

Base ​

nix
{config, ...}: {
  nps.stacks.streaming = {
    enable = true;

    gluetun = {
      vpnProvider = "airvpn";
      wireguardPrivateKeyFile = config.sops.secrets."gluetun/wg_pk".path;
      wireguardPresharedKeyFile = config.sops.secrets."gluetun/wg_psk".path;
      wireguardAddressesFile = config.sops.secrets."gluetun/wg_address".path;
    };
  };
}

Full ​

nix
{config, ...}: {
  nps.stacks.streaming = {
    enable = true;

    gluetun = {
      vpnProvider = "airvpn";
      wireguardPrivateKeyFile = config.sops.secrets."gluetun/wg_pk".path;
      wireguardPresharedKeyFile = config.sops.secrets."gluetun/wg_psk".path;
      wireguardAddressesFile = config.sops.secrets."gluetun/wg_address".path;

      extraEnv = {
        FIREWALL_VPN_INPUT_PORTS.fromFile = config.sops.secrets."qbittorrent/torrenting_port".path;
      };
    };

    qbittorrent.extraEnv = {
      TORRENTING_PORT.fromFile = config.sops.secrets."qbittorrent/torrenting_port".path;
    };

    jellyfin = {
      oidc = {
        enable = true;
        clientSecretFile = config.sops.secrets."jellyfin/authelia/client_secret".path;
      };
    };

    qui = {
      enable = true;
      oidc = {
        enable = true;
        clientSecretFile = config.sops.secrets."qui/authelia/client_secret".path;
      };
    };

    profilarr.enable = true;
    seerr.enable = true;
  };
}

Notes ​

By default, Jellyfin writes to /config/cache/transcodes for transcoding. This can cause a high amount of write operations on the underlying disk. To avoid this, you can optionally mount a tmpfs into the container:

nix
{
  nps.stacks.streaming = {
    containers.jellyfin.extraPodmanArgs = [ "--tmpfs=/config/cache/transcodes:size=4G" ];
  };
}

Ram size to be determined on what you have available but 4G seems to be sufficient for most transcodes. Thanks to @Zer0PointModule for the hint.

Stack Options ​

nps.stacks.streaming.bazarr.db.passwordFile ​

The file containing the PostgreSQL password for the database. Only used if db.type is set to "postgres".

Type
plaintext
absolute path
Declaration
<nps/modules/streaming>

nps.stacks.streaming.bazarr.db.type ​

Type of the database to use. Can be set to "sqlite" or "postgres". If set to "postgres", the passwordFile option must be set.

Type
plaintext
one of "sqlite", "postgres"
Default
nix
"sqlite"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.bazarr.db.username ​

The PostgreSQL user to use for the database. Only used if db.type is set to "postgres".

Type
plaintext
string
Default
nix
"bazarr"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.bazarr.enable ​

Whether to enable bazarr.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.bazarr.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.bazarr ​

Alias of {option}services.podman.containers.bazarr.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.gluetun ​

Alias of {option}services.podman.containers.gluetun.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.jellyfin ​

Alias of {option}services.podman.containers.jellyfin.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.prowlarr ​

Alias of {option}services.podman.containers.prowlarr.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.qbittorrent ​

Alias of {option}services.podman.containers.qbittorrent.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.qui ​

Alias of {option}services.podman.containers.qui.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.radarr ​

Alias of {option}services.podman.containers.radarr.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.seerr ​

Alias of {option}services.podman.containers.seerr.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.containers.sonarr ​

Alias of {option}services.podman.containers.sonarr.

Type
plaintext
submodule
Declaration
<nps/modules/streaming>

nps.stacks.streaming.enable ​

Whether to enable streaming.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.flaresolverr.enable ​

Whether to enable Flaresolverr.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.enable ​

Whether to enable Gluetun.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

See https://github.com/qdm12/gluetun-wiki/tree/main/setup/options

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Example
nix
{
  HTTPPROXY_PASSWORD = {
    fromFile = "/run/secrets/http_proxy_password";
  };
  HTTP_CONTROL_SERVER_LOG = "off";
  SERVER_NAMES = "Alderamin,Alderamin";
}
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.settings ​

Type
plaintext
TOML value
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.vpnProvider ​

The VPN provider to use with Gluetun.

Type
plaintext
string
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.wireguardAddressesFile ​

Path to the file containing the Wireguard addresses. Will be used to set the WIREGUARD_ADDRESSES environment variable.

Type
plaintext
null or absolute path
Default
nix
null
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.wireguardPresharedKeyFile ​

Path to the file containing the Wireguard pre-shared key. Will be used to set the WIREGUARD_PRESHARED_KEY environment variable.

Type
plaintext
null or absolute path
Default
nix
null
Declaration
<nps/modules/streaming>

nps.stacks.streaming.gluetun.wireguardPrivateKeyFile ​

Path to the file containing the Wireguard private key. Will be used to set the WIREGUARD_PRIVATE_KEY environment variable.

Type
plaintext
absolute path
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.enable ​

Whether to enable Jellyfin.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.oidc.adminGroup ​

Users of this group will be assigned admin rights in Jellyfin

Type
plaintext
string
Default
nix
"jellyfin_admin"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.oidc.clientSecretFile ​

The file containing the client secret for the OIDC client that will be registered in Authelia.

For examples on how to generate a client secret, see

https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

Type
plaintext
string
Example
nix
config.sops.secrets."immich/authelia/client_secret".path"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.oidc.clientSecretHash ​

The client secret hash. For examples on how to generate a client secret, see https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

The value can be passed in multiple ways:

  1. As a literal string
  2. As an absolute path to a file containing the hash (toFile)
  3. As an absolute oath to a file containing the client_secret, in which case the hash will be automatically computed (toHash)
  4. As null

If left unset (null), the client secret will be read from the file specified in the clientSecretFile option and hashed automatically before being passed to the Authelia container.

Type
plaintext
null or string or (submodule)
Default
nix
null
Example
nix
# Literal String:
"$pbkdf2-sha512$310000$cbOAIWbfz3vCVXIPIp6d2A$J0klwULa6TvPRCU1HAfuKua/dMKTl8gbTYJz2N73ejGUu0LUGz/y3kwmJLuKuAYGg3WQOT0q9ZzVHHUvpKpgvQ"

# Client secret hash stored in a file
{ fromFile = config.sops.secrets."immich/client_secret_hash".path; }

# Client secret stored in a file: Hash will be computed dynamically
{ toHash = config.sops.secrets."immich/client_secret".path; }

# Null (default): Hash will be computed automatically based on the clientSecretFile option
# Equivalent to { toHash = cfg.oidc.clientSecretFile; }
null
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.oidc.enable ​

Whether to enable OIDC login with Authelia. This will register an OIDC client in Authelia and setup the necessary configuration file.

The plugin configuration will be automatically provided, the plugin itself has to be installed in the Jellyfin Web-UI tho.

For details, see:

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/streaming>

nps.stacks.streaming.jellyfin.oidc.userGroup ​

Users of this group will be able to log in

Type
plaintext
string
Default
nix
"jellyfin_user"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.profilarr.enable ​

Whether to enable Profilarr.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.prowlarr.db.passwordFile ​

The file containing the PostgreSQL password for the database. Only used if db.type is set to "postgres".

Type
plaintext
absolute path
Declaration
<nps/modules/streaming>

nps.stacks.streaming.prowlarr.db.type ​

Type of the database to use. Can be set to "sqlite" or "postgres". If set to "postgres", the passwordFile option must be set.

Type
plaintext
one of "sqlite", "postgres"
Default
nix
"sqlite"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.prowlarr.db.username ​

The PostgreSQL user to use for the database. Only used if db.type is set to "postgres".

Type
plaintext
string
Default
nix
"prowlarr"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.prowlarr.enable ​

Whether to enable prowlarr.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.prowlarr.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qbittorrent.enable ​

Whether to enable qBittorrent.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qbittorrent.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

See https://docs.linuxserver.io/images/docker-qbittorrent/#environment-variables-e

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Example
nix
{
  TORRENTING_PORT = "6881";
}
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.adminPasswordFile ​

Path to the file containing the admin password. If set, an admin user will be created automatically.

Type
plaintext
null or absolute path
Default
nix
null
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.adminUsername ​

Admin username to access the dashboard.

Type
plaintext
string
Default
nix
"admin"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.enable ​

Whether to enable qui.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.oidc.clientSecretFile ​

The file containing the client secret for the OIDC client that will be registered in Authelia.

For examples on how to generate a client secret, see

https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

Type
plaintext
string
Example
nix
config.sops.secrets."immich/authelia/client_secret".path"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.oidc.clientSecretHash ​

The client secret hash. For examples on how to generate a client secret, see https://www.authelia.com/integration/openid-connect/frequently-asked-questions/#client-secret

The value can be passed in multiple ways:

  1. As a literal string
  2. As an absolute path to a file containing the hash (toFile)
  3. As an absolute oath to a file containing the client_secret, in which case the hash will be automatically computed (toHash)
  4. As null

If left unset (null), the client secret will be read from the file specified in the clientSecretFile option and hashed automatically before being passed to the Authelia container.

Type
plaintext
null or string or (submodule)
Default
nix
null
Example
nix
# Literal String:
"$pbkdf2-sha512$310000$cbOAIWbfz3vCVXIPIp6d2A$J0klwULa6TvPRCU1HAfuKua/dMKTl8gbTYJz2N73ejGUu0LUGz/y3kwmJLuKuAYGg3WQOT0q9ZzVHHUvpKpgvQ"

# Client secret hash stored in a file
{ fromFile = config.sops.secrets."immich/client_secret_hash".path; }

# Client secret stored in a file: Hash will be computed dynamically
{ toHash = config.sops.secrets."immich/client_secret".path; }

# Null (default): Hash will be computed automatically based on the clientSecretFile option
# Equivalent to { toHash = cfg.oidc.clientSecretFile; }
null
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.oidc.enable ​

Whether to enable OIDC login with Authelia. This will register an OIDC client in Authelia and setup the necessary configuration.

For details, see:

Type
plaintext
boolean
Default
nix
false
Declaration
<nps/modules/streaming>

nps.stacks.streaming.qui.oidc.userGroup ​

Users of this group will be able to log in

Type
plaintext
string
Default
nix
"qui_user"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.radarr.db.passwordFile ​

The file containing the PostgreSQL password for the database. Only used if db.type is set to "postgres".

Type
plaintext
absolute path
Declaration
<nps/modules/streaming>

nps.stacks.streaming.radarr.db.type ​

Type of the database to use. Can be set to "sqlite" or "postgres". If set to "postgres", the passwordFile option must be set.

Type
plaintext
one of "sqlite", "postgres"
Default
nix
"sqlite"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.radarr.db.username ​

The PostgreSQL user to use for the database. Only used if db.type is set to "postgres".

Type
plaintext
string
Default
nix
"radarr"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.radarr.enable ​

Whether to enable radarr.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.radarr.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Declaration
<nps/modules/streaming>

nps.stacks.streaming.seerr.enable ​

Whether to enable Seerr.

Type
plaintext
boolean
Default
nix
false
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.sonarr.db.passwordFile ​

The file containing the PostgreSQL password for the database. Only used if db.type is set to "postgres".

Type
plaintext
absolute path
Declaration
<nps/modules/streaming>

nps.stacks.streaming.sonarr.db.type ​

Type of the database to use. Can be set to "sqlite" or "postgres". If set to "postgres", the passwordFile option must be set.

Type
plaintext
one of "sqlite", "postgres"
Default
nix
"sqlite"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.sonarr.db.username ​

The PostgreSQL user to use for the database. Only used if db.type is set to "postgres".

Type
plaintext
string
Default
nix
"sonarr"
Declaration
<nps/modules/streaming>

nps.stacks.streaming.sonarr.enable ​

Whether to enable sonarr.

Type
plaintext
boolean
Default
nix
true
Example
nix
true
Declaration
<nps/modules/streaming>

nps.stacks.streaming.sonarr.extraEnv ​

Extra environment variables to set for the container. Variables can be either set directly or sourced from a file (e.g. for secrets).

Type
plaintext
attribute set of (null or boolean or signed integer or string or absolute path or (submodule))
Default
nix
{ }
Declaration
<nps/modules/streaming>