Implement media group for NFS permission management

- Create shared media-group.nix module with fixed GID (993)
- Add both geir and sma users to media group for shared NFS access
- Update NFS server configuration to use root:media ownership with 0775 permissions
- Convert all media services to use media group instead of users group:
  - Jellyfin, Calibre-web, Audiobookshelf, Transmission
- Enable group write access to all NFS shares (/mnt/storage/*)
- Maintain security with root ownership while allowing group collaboration

This resolves NFS permission issues by providing consistent group-based access
control across all media services and storage directories.
This commit is contained in:
Geir Okkenhaug Jerstad 2025-06-11 09:33:24 +02:00
parent 2276dd59cd
commit 967ba38411
8 changed files with 83 additions and 30 deletions

View file

@ -1,9 +1,16 @@
{ config, pkgs, ... }:
{
services.jellyfin = {
enable = true;
group = "users";
};
networking.firewall.allowedTCPPorts = [ 8096 8920 ];
networking.firewall.allowedUDPPorts = [ 1900 7359 ];
config,
pkgs,
...
}: {
imports = [
../../../modules/users/media-group.nix
];
services.jellyfin = {
enable = true;
group = "media";
};
networking.firewall.allowedTCPPorts = [8096 8920];
networking.firewall.allowedUDPPorts = [1900 7359];
}