ude: deluge init

hosts/ude/default.nix

@@ -44,5 +44,24 @@
         '';
       };
       networking.firewall.allowedTCPPorts = [ 80 ];
+
+      age.secrets.deluge-auth = {
+        file = ../../secrets/ude-deluge.age;
+        owner = config.services.deluge.user;
+      };
+      services.deluge = {
+        enable = true;
+        web.enable = true;
+        declarative = true;
+        openFirewall = true;
+        authFile = config.age.secrets.deluge-auth.path;
+        config = {
+          download_location = "${config.services.deluge.dataDir}/torrents/";
+          allow_remote = true;
+          daemon_port = 58846;
+          listen_ports = lib.genList (off: 6881 + off) 10;
+          random_port = false;
+        };
+      };
     };
 }

secrets/secrets.nix

@@ -85,4 +85,8 @@ in
     keys.system.kazuki
     keys.other.bootstrap
   ];
+  "ude-deluge.age".publicKeys = [
+    keys.system.ude
+    keys.other.bootstrap
+  ];
 }

secrets/ude-deluge.age

@@ -0,0 +1,7 @@
+age-encryption.org/v1
+-> ssh-ed25519 IFuY+w +zbPYKlvvfaIQl+PnnZlEai/TAgzsQ7s/1bLXNXnXEw
+BTQQRxlaRFbWnV6e+QBPDfN+lyg9URj+2h85tDKZ19k
+-> ssh-ed25519 GKhvwg DzWYIGY0CNdA5wp7PkV1gpWmtYG28or8XeNZ7DkLz1c
+ELQVeuyaIOWVH6+oMDDlI3CikDLe5jijwVPbaRBL2NQ
+--- vCU0PryisDG8cOKr6CmPcUwjIdThsRjrty/fowZNwOk
+ð”Êh<1F>+Ñ®ì>³ùöíHV`w|e/³ò]â½kšïyð´S~d¡¡œm&Û9¹ªýY)ÍÉ)T
ôn•ç¡Sê8Ç@Û¿zsSÉÑÒÔg'