From ca15ea5e9bc41d4e756a858bd6f84c6deb002faa Mon Sep 17 00:00:00 2001
From: Max Audron <audron@cocaine.farm>
Date: Sun, 26 Oct 2025 17:10:11 +0100
Subject: fix slskd stuff

---
 modules/tlmp/slsk.nix | 23 +++++++++++++----------
 1 file changed, 13 insertions(+), 10 deletions(-)

(limited to 'modules/tlmp/slsk.nix')

diff --git a/modules/tlmp/slsk.nix b/modules/tlmp/slsk.nix
index 4c170c4..d1e70df 100644
--- a/modules/tlmp/slsk.nix
+++ b/modules/tlmp/slsk.nix
@@ -15,6 +15,8 @@ with self.lib.nginx;
     environmentFile = "/etc/secrets/slskd.env";
     domain = null;
 
+    group = "media";
+
     settings = {
       remote_file_management = true;
 
@@ -23,6 +25,12 @@ with self.lib.nginx;
         incomplete = "/mnt/media/soulseek/incomplete";
       };
 
+      permissions = {
+        file = {
+          mode = "664";
+        };
+      };
+
       soulseek = {
         listen_ip_address = "0.0.0.0";
         listen_port = 50300;
@@ -57,7 +65,7 @@ with self.lib.nginx;
               slots = 100;
               speed_limit = 750000;
             };
-            members = [ ];
+            members = [ "thecumzone" ];
           };
         };
       };
@@ -79,15 +87,15 @@ with self.lib.nginx;
       };
 
       retention = {
-        search = 2880; # 2 day
+        search = 1440; # 2 day
         transfers = {
           upload = {
-            succeeded = 2880; # 2 day
+            succeeded = 1440; # 2 day
             errored = 30;
             cancelled = 5;
           };
           download = {
-            succeeded = 2880; # 2 day
+            succeeded = 1440; # 2 day
             errored = 20160; # 2 weeks
             cancelled = 5;
           };
@@ -97,11 +105,6 @@ with self.lib.nginx;
     };
   };
 
-  # VPN Setup
-  # SLSKD_SLSK_LISTEN_IP_ADDRESS
-  # SLSKD_SLSK_LISTEN_PORT
-  users.users.slskd.extraGroups = [ "media" ];
-
   systemd.services.slskd = {
     bindsTo = [ "wireguard-torrent.service" ];
     after = [ "wireguard-torrent.service" ];
@@ -115,7 +118,7 @@ with self.lib.nginx;
     '';
     serviceConfig = {
       PrivateNetwork = true;
-      UMask = "a=rw";
+      UMask = "002";
 
       ProtectSystem = lib.mkForce "full";
     };
-- 
cgit v1.2.3