feat(copyparty): Allow reading of /var/lib/slskd

This commit is contained in:
Madeleine Sydney
2025-03-09 11:03:20 -06:00
parent 04a23ded90
commit 251f404699
2 changed files with 13 additions and 21 deletions

View File

@@ -29,13 +29,23 @@ in {
services.copyparty = {
enable = true;
settings = {
# These three options are necessary for SSO integration. No idea what
# they do. }:)
xff-src = "lan";
# These three options (`idp-h-usr`, `idp-h-grp`, `xff-src`) are
# necessary for SSO integration.
# The HTTP headers (provided by the coproxy) where Copyparty can expect
# to find the user's name and groups.
idp-h-usr = "remote-user";
idp-h-grp = "remote-groups";
# For security reasons, Copyparty will only acknowledge those headers
# when the request comes from a known IP address specified here. In our
# case, we tell it to accept requests from any private IP.
xff-src = "lan";
};
volumes = {
"/Soulseek" = {
path = "/var/lib/slskd";
access.r = "*";
};
"/Jellyfin" = {
path = "/persist/vault/jellyfin";
# View and upload, but no deleting.