temp and updates

modules/apps/jellyseerr/jellyseerr.nix

@@ -7,7 +7,7 @@ let
   mediaDir = "/media";
   jellyseerrUserId = config.users.users.nix-apps.uid;
   jellyseerrGroupId = config.users.groups.jallen-nas.gid;
-  package = pkgs.unstable.jellyseerr;
+  package = pkgs.jellyseerr;
 in
 {
   containers.jellyseerr = {

modules/apps/paperless/default.nix

@@ -0,0 +1,92 @@
+{ config, pkgs, lib, ... }:
+
+let
+  paperlessPort = 28981;
+  paperlessUserId = config.users.users.nix-apps.uid;
+  paperlessGroupId = config.users.groups.jallen-nas.gid;
+  passwordFile = config.sops.secrets."jallen-nas/admin_password".path;
+in
+{
+  containers.paperless = {
+    autoStart = true;
+    privateNetwork = true;
+    hostAddress = "10.0.1.18";
+    localAddress = "10.0.1.20";
+    hostAddress6 = "fc00::1";
+    localAddress6 = "fc00::20";
+    
+    config = { config, pkgs, lib, ... }: {
+      # Enable paperless service
+      services.paperless = {
+        enable = true;
+        port = paperlessPort;
+        user = "paperless";
+        address = "0.0.0.0";
+        passwordFile = "/var/lib/paperless/paperless-password";
+        # settings = {
+        #   PAPERLESS_APPS="allauth.socialaccount.providers.openid_connect";
+        #   PAPERLESS_SOCIALACCOUNT_PROVIDERS = {
+        #     "openid_connect" = {
+        #       "OAUTH_PKCE_ENABLED":true,
+        #       "APPS":[
+        #         {"provider_id":"authentik","name":"Authentik","client_id":"<Client ID>","secret":<Client Secret>","settings":{"server_url":"https://authentik.mjallen.dev/application/o/paperless/.well-known/openid-configuration"}}]}}
+        # }
+      };
+
+      # Create required users and groups
+      users.groups = {
+        documents = { gid = lib.mkForce paperlessGroupId; };
+      };
+
+      users.users.paperless = {
+        isSystemUser = true;
+        uid = lib.mkForce paperlessUserId;
+        group = lib.mkForce "documents";
+      };
+
+      # Create and set permissions for required directories
+      system.activationScripts.paperless-dirs = ''
+        mkdir -p /var/lib/paperless
+
+        chown -R paperless:documents /var/lib/paperless
+        
+        chmod -R 775 /var/lib/paperless
+        
+      '';
+
+      networking = {
+        firewall = {
+          enable = true;
+          allowedTCPPorts = [ paperlessPort ];
+        };
+        # Use systemd-resolved inside the container
+        # Workaround for bug https://github.com/NixOS/nixpkgs/issues/162686
+        useHostResolvConf = lib.mkForce false;
+      };
+      
+      services.resolved.enable = true;
+      system.stateVersion = "23.11";
+    };
+
+    # Bind mount directories from host
+    bindMounts = {
+      "/var/lib/paperless" = {
+        hostPath = "/media/nas/ssd/nix-app-data/paperless";
+        isReadOnly = false;
+      };
+      # "/run/keys/paperless-password" = {
+      #   hostPath = passwordFile;
+      #   isReadOnly = true;
+      # };
+    };
+  };
+
+  networking.nat = {
+    forwardPorts = [
+      {
+        destination = "10.0.1.20:28981";
+        sourcePort = paperlessPort;
+      }
+    ];
+  };
+}

modules/apps/radarr/radarr.nix

@@ -7,7 +7,7 @@ let
   mediaDir = "/media";
   radarrUserId = config.users.users.nix-apps.uid;
   radarrGroupId = config.users.groups.jallen-nas.gid;
-  package = pkgs.unstable.radarr;
+  package = pkgs.radarr;
 in
 {
   containers.radarr = {