From 905e3f9be5dbba539fcfe2b115c11bb57b0f96f9 Mon Sep 17 00:00:00 2001
From: Adam0 <alumail@protonmail.com>
Date: Wed, 24 Jun 2026 06:54:43 +0200
Subject: [PATCH] crowdsec & beszel

---
 modules/hosts/euclid/default.nix   | 22 +++++++++++++++++++++-
 modules/profiles/common/tweaks.nix |  1 +
 modules/services/crowdsec.nix      |  3 +++
 modules/users.nix                  |  2 ++
 4 files changed, 27 insertions(+), 1 deletion(-)

diff --git a/modules/hosts/euclid/default.nix b/modules/hosts/euclid/default.nix
index 7692c78..a269a6c 100644
--- a/modules/hosts/euclid/default.nix
+++ b/modules/hosts/euclid/default.nix
@@ -48,6 +48,20 @@
         source = "appsec";
       }
 
+      {
+        container_name = ["jellyfin"];
+        docker_host = "unix:///run/podman/podman.sock";
+        labels.type = "jellyfin";
+        source = "docker";
+      }
+
+      {
+        container_name = ["seerr"];
+        docker_host = "unix:///run/podman/podman.sock";
+        labels.type = "jellyseerr";
+        source = "docker";
+      }
+
       {
         filenames = ["/var/log/traefik/*.log"];
         labels.type = "traefik";
@@ -63,6 +77,12 @@
         source = "journalctl";
       }
 
+      {
+        journalctl_filter = ["_SYSTEMD_UNIT=gotify-server.service"];
+        labels.type = "gotify";
+        source = "journalctl";
+      }
+
       {
         journalctl_filter = ["_SYSTEMD_UNIT=sshd.service"];
         labels.type = "syslog";
@@ -80,7 +100,7 @@
       "10.100.0.1" = ["euclid.wg"];
     };
 
-    users.users.${config.services.crowdsec.user}.extraGroups = ["podman"];
+    users.users.${config.services.crowdsec.user}.extraGroups = ["podman" "traefik"];
 
     systemd.services.crowdsec = {
       after = ["podman.socket"];
diff --git a/modules/profiles/common/tweaks.nix b/modules/profiles/common/tweaks.nix
index d0c7757..224a783 100644
--- a/modules/profiles/common/tweaks.nix
+++ b/modules/profiles/common/tweaks.nix
@@ -83,6 +83,7 @@
         bash
         coreutils
         hdparm
+        smartmontools
         # keep-sorted end
       ];
 
diff --git a/modules/services/crowdsec.nix b/modules/services/crowdsec.nix
index 5e64085..21a43c9 100644
--- a/modules/services/crowdsec.nix
+++ b/modules/services/crowdsec.nix
@@ -54,6 +54,9 @@
       hub = {
         collections = [
           # keep-sorted start
+          "LePresidente/jellyfin"
+          "LePresidente/jellyseerr"
+          "baudneo/gotify"
           "crowdsecurity/appsec-generic-rules"
           "crowdsecurity/appsec-virtual-patching"
           "crowdsecurity/http-cve"
diff --git a/modules/users.nix b/modules/users.nix
index ed7cb80..90e0597 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -36,6 +36,8 @@
         extraGroups = [
           # keep-sorted start
           "audio"
+          "render"
+          "video"
           "wheel"
           # keep-sorted end
         ];
-- 
2.51.2