From 6ec1557e427f468a2af965814a76dca7f8385ff2 Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Thu, 13 Apr 2023 22:53:38 +0200
Subject: [PATCH] mediaserver: wireguard+prowlarr

---
 system/hosts/mediaserver.nix |  1 +
 system/nixos/prowlarr.nix    | 15 +++++++++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 system/nixos/prowlarr.nix

diff --git a/system/hosts/mediaserver.nix b/system/hosts/mediaserver.nix
index 93a5bff..f632ac1 100644
--- a/system/hosts/mediaserver.nix
+++ b/system/hosts/mediaserver.nix
@@ -16,6 +16,7 @@ in
     ../nixos/tailscale.nix
 
     ../nixos/wireguard-netns.nix
+    ../nixos/prowlarr.nix
   ];
 
   system.stateVersion = "22.11";
diff --git a/system/nixos/prowlarr.nix b/system/nixos/prowlarr.nix
new file mode 100644
index 0000000..135fe59
--- /dev/null
+++ b/system/nixos/prowlarr.nix
@@ -0,0 +1,15 @@
+{
+  services.prowlarr = {
+    enable = true;
+    openFirewall = false;
+  };
+
+  systemd.services.prowlarr = {
+    bindsTo = [ "netns@wg.service" ];
+    after = [ "wg.service" ];
+
+    serviceConfig = {
+      NetworkNamespacePath = "/var/run/netns/wg";
+    };
+  };
+}