Services

Source directory: modules/services/

default.nix

modules/services/appimage/default.nix

No option declarations; see source for implementation.

arr-suite-mcp.nix

modules/services/arr-suite-mcp.nix

arr-suite MCP server — exposed as an HTTP/SSE daemon.

arr-suite-mcp (shaktech786) is a stdio-only Python MCP server. To make it a tailnet-reachable daemon we wrap it with mcp-proxy (stdio→SSE):

mcp-proxy --host 0.0.0.0 --port --pass-environment -- arr-suite-mcp

Clients connect to the SSE endpoint: http://:/sse

The *arr API keys are supplied via an agenix EnvironmentFile (SONARR/RADARR/PROWLARR/OVERSEERR_API_KEY). Hosts/ports default to localhost: inside arr-suite, matching the services on p510. NZBGeek is reached transitively through Prowlarr's API.

• Enable option: arr-suite MCP server (SSE daemon via mcp-proxy)

Options declaration (Nix)

  options.features.arr-suite-mcp = {
    enable = lib.mkEnableOption "arr-suite MCP server (SSE daemon via mcp-proxy)";

    port = lib.mkOption {
      type = lib.types.port;
      default = 3011;
      description = "Port the SSE bridge binds to (loopback always; tailnet + LAN via firewall).";
    };

    environmentFile = lib.mkOption {
      type = lib.types.path;
      default = config.age.secrets."arr-suite-mcp-env".path;
      defaultText = lib.literalExpression ''config.age.secrets."arr-suite-mcp-env".path'';
      description = "EnvironmentFile with the *arr API keys (KEY=VALUE per line).";
    };

    listenLanInterface = lib.mkOption {
      type = lib.types.nullOr lib.types.str;
      default = null;
      example = "eno1";
      description = ''
        LAN interface to open the port on, in addition to tailscale0 and
        loopback. null exposes the daemon only via Tailscale. (No effect on
        hosts where the firewall is disabled.)
      '';
    };
  }

default.nix

modules/services/atuin/default.nix

No option declarations; see source for implementation.

audible-sync.nix

modules/services/audible-sync.nix

audible-sync — download + decrypt your Audible library to local .m4b files.

UX: one command, audible-sync, after a one-time interactive login. Pipeline: library export → bulk download (.aaxc/.aax) → decrypt to .m4b → organise into one folder per book under outputDir. Re-runnable; already-downloaded books and already-decrypted files are skipped.

Per-host wiring (currently p620 only):

features.audibleSync = { enable = true; outputDir = "~/audiobooks/audible"; # default };

One-time setup (run interactively on p620 AFTER deploy): 1. audible quickstart # picks marketplace, handles 2FA in browser 2. audible library list # confirm your books are visible 3. audible-sync # downloads + decrypts everything

Legal note: stripping DRM violates Audible's ToS. Personal-use only.

• Enable option: audible-sync — download + decrypt Audible library to .m4b

Options declaration (Nix)

  options.features.audibleSync = {
    enable = lib.mkEnableOption "audible-sync — download + decrypt Audible library to .m4b";

    outputDir = lib.mkOption {
      type = lib.types.str;
      default = "~/audiobooks/audible";
      description = ''
        Destination for decrypted, organised .m4b files (one folder per book).
        Tilde is expanded at runtime against the invoking user's $HOME.
      '';
    };
  }

audiobook-import.nix

modules/services/audiobook-import.nix

audiobook-import — completed-download → Audiobookshelf import pipeline.

A timer-driven reconciler (modules/services/audiobook-import.py) that scans the audiobook download dir(s) for stable, completed folders, uses the local Ollama to parse the release name into structured metadata, optionally merges multi-file books into a chaptered M4B via m4b-tool, and hardlinks/places the result into the Audiobookshelf library with a metadata.json. Idempotent via a .imported marker; sources are left intact so torrent seeding continues.

• Enable option: audiobook download → Audiobookshelf import pipeline

Options declaration (Nix)

  options.features.audiobook-import = {
    enable = lib.mkEnableOption "audiobook download → Audiobookshelf import pipeline";

    watchDirs = lib.mkOption {
      type = lib.types.listOf lib.types.str;
      default = [ "/mnt/media/downloads/torrents/audiobooks" ];
      description = "Download directories scanned for completed audiobook folders.";
    };

    libraryDir = lib.mkOption {
      type = lib.types.str;
      default = "/mnt/media/Media/Audiobooks";
      description = "Audiobookshelf library root to place imported books into.";
    };

    model = lib.mkOption {
      type = lib.types.str;
      default = "qwen2.5:7b";
      description = "Ollama model used for metadata extraction (strict JSON).";
    };

    ollamaUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:11434";
      description = "Base URL of the local Ollama server.";
    };

    mergeToM4b = lib.mkOption {
      type = lib.types.bool;
      default = true;
      description = "Merge multi-file audiobooks into a single chaptered M4B via m4b-tool.";
    };

    stableSeconds = lib.mkOption {
      type = lib.types.int;
      default = 120;
      description = "Skip folders modified more recently than this (still downloading).";
    };

    interval = lib.mkOption {
      type = lib.types.str;
      default = "*:0/5";
      description = "systemd OnCalendar expression for the import scan (default every 5 min).";
    };

    user = lib.mkOption {
      type = lib.types.str;
      default = "olafkfreund";
      description = "User to run the import as (must own the library + read downloads).";
    };

    group = lib.mkOption {
      type = lib.types.str;
      default = "users";
      description = "Group to run the import as.";
    };
  }

audiobook-mcp.nix

modules/services/audiobook-mcp.nix

audiobook-mcp — audiobook acquisition + library MCP server, as an SSE daemon.

audiobook-mcp (pkgs.customPkgs.audiobook-mcp) is a stdio FastMCP server. To make it tailnet-reachable we wrap it with mcp-proxy (stdio→SSE):

mcp-proxy --host 0.0.0.0 --port --pass-environment -- audiobook-mcp

Clients connect to the SSE endpoint: http://:/sse

Backend URLs default to the local services on p510 and are passed as plain env; the API keys (PROWLARR/SABNZBD/ABS) come from an agenix EnvironmentFile read by systemd as root before dropping to the DynamicUser.

• Enable option: audiobook MCP server (SSE daemon via mcp-proxy)

Options declaration (Nix)

  options.features.audiobook-mcp = {
    enable = lib.mkEnableOption "audiobook MCP server (SSE daemon via mcp-proxy)";

    port = lib.mkOption {
      type = lib.types.port;
      default = 3012;
      description = "Port the SSE bridge binds to (loopback always; tailnet + LAN via firewall).";
    };

    abbAppUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:5078";
      description = "audiobookbay-automated base URL (used to add ABB releases).";
    };

    prowlarrUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:9696";
      description = "Prowlarr base URL (Usenet/torrent indexer search).";
    };

    sabnzbdUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:8080";
      description = "SABnzbd base URL (Usenet grabs).";
    };

    audiobookshelfUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:13378";
      description = "Audiobookshelf base URL (library lookups).";
    };

    ollamaUrl = lib.mkOption {
      type = lib.types.str;
      default = "http://127.0.0.1:11434";
      description = "Local Ollama base URL (recommend_bestsellers tool).";
    };

    ollamaModel = lib.mkOption {
      type = lib.types.str;
      default = "qwen2.5:7b";
      description = "Ollama model used for bestseller suggestions.";
    };

    environmentFile = lib.mkOption {
      type = lib.types.path;
      default = config.age.secrets."audiobook-mcp-env".path;
      defaultText = lib.literalExpression ''config.age.secrets."audiobook-mcp-env".path'';
      description = "EnvironmentFile with backend API keys (PROWLARR/SABNZBD/ABS).";
    };

    listenLanInterface = lib.mkOption {
      type = lib.types.nullOr lib.types.str;
      default = null;
      example = "eno1";
      description = ''
        LAN interface to open the port on, in addition to tailscale0 and
        loopback. null exposes the daemon only via Tailscale.
      '';
    };
  }

audiobookbay-automated.nix

modules/services/audiobookbay-automated.nix

audiobookbay-automated — AudioBookBay search → Transmission web app.

A small Flask app (pkgs.customPkgs.audiobookbay-automated) that searches AudioBookBay and sends the chosen release's magnet to the existing Transmission daemon on p510. Each download is saved to /