darmanandClaude Sonnet 5
6f24ab69ad
Comments had drifted into multi-paragraph narrative (git commit lineage, debugging stories, restated code) in several hot spots (scripts/deploy, hermes-agent.nix, flake.nix, gitea.nix, headscale.nix). Trim every comment to its load-bearing "why" — gotchas, safety warnings, and non-obvious rationale survive verbatim in substance, just tightened to 1-2 sentences; historical narrative and anything already covered in CLAUDE.md is cut. No code/logic changed. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01UJqEmY1y3AYX3JoX4Y6b21
31 lines
1.4 KiB
Nix
31 lines
1.4 KiB
Nix
{ ... }:
|
|
|
|
# Prowlarr — indexer manager (usenet + torrent), feeds SABnzbd/MediaManager.
|
|
# dataDir is left at the module default: a *custom* dataDir makes the
|
|
# upstream module force-reset it to 0700 root:root on every boot, stomping
|
|
# DynamicUser's access ("unable to open database file"). Instead bind-mount
|
|
# the real (migrated-from-ZimaOS) config dir onto the default path, so
|
|
# DynamicUser+StateDirectory chowns it on first activation like a fresh
|
|
# install — no manual chown needed.
|
|
#
|
|
# Mount onto /var/lib/private/prowlarr, NOT the public /var/lib/prowlarr:
|
|
# StateDirectory symlinks the public path to .../private/<name>; binding
|
|
# onto the public path itself blocks systemd's migrate-on-start rename
|
|
# ("Device or resource busy", exit 238/STATE_DIRECTORY).
|
|
{
|
|
services.prowlarr.enable = true;
|
|
|
|
# `nofail` is not optional: without it this bind is RequiredBy local-fs.target,
|
|
# so an unassembled array drops jupiter into emergency mode — a dead end on a
|
|
# headless box with root locked. Let this bind fail alone instead.
|
|
fileSystems."/var/lib/private/prowlarr" = {
|
|
device = "/mnt/data/AppData/prowlarr/config";
|
|
fsType = "none";
|
|
options = [ "bind" "nofail" ];
|
|
};
|
|
|
|
# systemd derives RequiresMountsFor only from /var/lib/prowlarr (eMMC) — pin
|
|
# it to the array too, or prowlarr starts happily and writes state to the OS disk.
|
|
systemd.services.prowlarr.unitConfig.RequiresMountsFor = [ "/mnt/data" ];
|
|
}
|