Add prowlarr

Signed-off-by: Nikolaos Karaolidis <nick@karaolidis.com>

packages/default.nix

@@ -11,6 +11,7 @@
 
   docker-authelia = import ./docker/authelia { inherit pkgs; };
   docker-base = import ./docker/base { inherit pkgs; };
+  docker-flaresolverr = import ./docker/flaresolverr { inherit pkgs; };
   docker-gitea = import ./docker/gitea { inherit pkgs; };
   docker-grafana = import ./docker/grafana { inherit pkgs; };
   docker-grafana-image-renderer = import ./docker/grafana-image-renderer { inherit pkgs; };
@@ -32,6 +33,7 @@
   docker-prometheus-smartctl-exporter = import ./docker/prometheus-smartctl-exporter {
     inherit pkgs;
   };
+  docker-prowlarr = import ./docker/prowlarr { inherit pkgs; };
   docker-redis = import ./docker/redis { inherit pkgs; };
   docker-shlink = import ./docker/shlink { inherit pkgs inputs system; };
   docker-shlink-web-client = import ./docker/shlink-web-client { inherit pkgs inputs system; };

packages/docker/flaresolverr/default.nix

@@ -0,0 +1,26 @@
+{ pkgs, ... }:
+pkgs.dockerTools.buildImage {
+  name = "flaresolverr";
+  fromImage = import ../base { inherit pkgs; };
+
+  copyToRoot = pkgs.buildEnv {
+    name = "root";
+    paths = with pkgs; [ flaresolverr ];
+    pathsToLink = [
+      "/bin"
+      "/share"
+    ];
+  };
+
+  config = {
+    Entrypoint = [ "flaresolverr" ];
+    ExposedPorts = {
+      "8191/tcp" = { };
+    };
+    Env = [
+      # FIXME: https://github.com/NixOS/nixpkgs/issues/176081
+      "FONTCONFIG_FILE=${pkgs.fontconfig.out}/etc/fonts/fonts.conf"
+      "FONTCONFIG_PATH=${pkgs.fontconfig.out}/etc/fonts/"
+    ];
+  };
+}

packages/docker/jellyfin/entrypoint.sh

@@ -17,7 +17,7 @@ start() {
 
 start "$@"
 
-JELLYFIN_HOST="${JELLYFIN_HOST:-http://localhost:8096}"
+JELLYFIN_HOST="http://localhost:8096"
 JELLYFIN_ADMIN_USERNAME="${JELLYFIN_ADMIN_USERNAME:-admin}"
 
 until setup="$(curl -sf --retry 10 --retry-connrefused "$JELLYFIN_HOST/System/Info/Public" | jq -r '.StartupWizardCompleted' 2>/dev/null)"; do

packages/docker/postgresql/entrypoint.sh

@@ -8,7 +8,6 @@ POSTGRES_PASSWORD="${POSTGRES_PASSWORD:-postgres}"
 POSTGRES_DB="${POSTGRES_DB:-$POSTGRES_USER}"
 export PGDATA="${PGDATA:-/var/lib/postgresql/data}"
 
-mkdir -p /tmp
 LOG_PIPE="$(mktemp -u)"
 mkfifo "$LOG_PIPE"
 

packages/docker/prometheus-fail2ban-exporter/entrypoint.sh

@@ -3,7 +3,6 @@
 set -o errexit
 set -o nounset
 
-mkdir -p /tmp
 LOG_PIPE="$(mktemp -u)"
 mkfifo "$LOG_PIPE"
 

packages/docker/prometheus-podman-exporter/entrypoint.sh

@@ -3,7 +3,6 @@
 set -o errexit
 set -o nounset
 
-mkdir -p /tmp
 LOG_PIPE="$(mktemp -u)"
 mkfifo "$LOG_PIPE"
 

packages/docker/prowlarr/default.nix

@@ -0,0 +1,43 @@
+{ pkgs, ... }:
+let
+  entrypoint = pkgs.writeTextFile {
+    name = "entrypoint";
+    executable = true;
+    destination = "/bin/entrypoint";
+    text = builtins.readFile ./entrypoint.sh;
+  };
+in
+pkgs.dockerTools.buildImage {
+  name = "prowlarr";
+  fromImage = import ../base { inherit pkgs; };
+
+  copyToRoot = pkgs.buildEnv {
+    name = "root";
+    paths = with pkgs; [
+      entrypoint
+      prowlarr
+      xmlstarlet
+      curl
+      jq
+    ];
+    pathsToLink = [
+      "/bin"
+      "/lib"
+    ];
+  };
+
+  runAsRoot = ''
+    ${pkgs.dockerTools.shadowSetup}
+  '';
+
+  config = {
+    Entrypoint = [ "entrypoint" ];
+    ExposedPorts = {
+      "9696/tcp" = { };
+    };
+    WorkingDir = "/var/lib/prowlarr";
+    Volumes = {
+      "/var/lib/prowlarr" = { };
+    };
+  };
+}

packages/docker/prowlarr/entrypoint.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env sh
+
+set -o errexit
+set -o nounset
+
+if [ ! -f /var/lib/prowlarr/init ]; then
+  echo '<Config/>' > /var/lib/prowlarr/config.xml
+
+  xmlstarlet ed -L \
+    -s /Config -t elem -n LaunchBrowser -v "False" \
+    -s /Config -t elem -n ApiKey -v "$PROWLARR_API_KEY" \
+    -s /Config -t elem -n AuthenticationMethod -v "External" \
+    -s /Config -t elem -n AuthenticationRequired -v "DisabledForLocalAddresses" \
+    -s /Config -t elem -n LogLevel -v "info" \
+    -s /Config -t elem -n UrlBase -v "${PROWLARR_URL_BASE:-}" \
+    -s /Config -t elem -n InstanceName -v "${PROWLARR_INSTANCE_NAME:-prowlarr}" \
+    -s /Config -t elem -n AnalyticsEnabled -v "False" \
+    /var/lib/prowlarr/config.xml
+fi
+
+Prowlarr -data=/var/lib/prowlarr -nobrowser "$@" &
+PID=$!
+
+PROWLARR_HOST="http://localhost:9696${PROWLARR_URL_BASE}"
+
+if [ ! -f /var/lib/prowlarr/init ]; then
+  curl -sf --retry 10 --retry-connrefused \
+    -H "X-Api-Key: $PROWLARR_API_KEY" \
+    "$PROWLARR_HOST/api/v1/health"
+
+  if [ -f /etc/prowlarr/setup.sh ]; then
+    # shellcheck disable=SC1091
+    . /etc/prowlarr/setup.sh
+  fi
+
+  touch /var/lib/prowlarr/init
+fi
+
+if [ -f /etc/prowlarr/post-start.sh ]; then
+  # shellcheck disable=SC1091
+  . /etc/prowlarr/post-start.sh
+fi
+
+trap 'kill -INT "$PID"' INT TERM
+wait "$PID"
+exit $?

packages/docker/transmission-protonvpn/default.nix

@@ -35,10 +35,6 @@ pkgs.dockerTools.buildImage {
     ];
   };
 
-  runAsRoot = ''
-    mkdir -p /tmp
-  '';
-
   config = {
     Entrypoint = [ "entrypoint" ];
     ExposedPorts = {