From dcccc85264f2c62af89f6f19c74094b722ed60b3 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Thu, 27 Jun 2024 21:44:35 +1000
Subject: [PATCH] feat: add media user to all media roles

- change *arrs to use media as the group
---
 doc/admin/groups.md                    | 9 +++++++++
 hieradata/roles/apps/media.yaml        | 7 +++++++
 hieradata/roles/apps/media/radarr.yaml | 2 +-
 hieradata/roles/apps/media/sonarr.yaml | 2 +-
 4 files changed, 18 insertions(+), 2 deletions(-)
 create mode 100644 doc/admin/groups.md

diff --git a/doc/admin/groups.md b/doc/admin/groups.md
new file mode 100644
index 0000000..0b4ba72
--- /dev/null
+++ b/doc/admin/groups.md
@@ -0,0 +1,9 @@
+# Group administration
+
+This page exists to list all the locally managed groups, their gid's and what their general purpose is for.
+
+## List of groups
+| name        | gid         | purpose     |
+|-------------|-------------|-------------|
+| admin | 10000 | admin group designed for system admins |
+| media | 10001 | group permissions to manage media (*arrs) |
diff --git a/hieradata/roles/apps/media.yaml b/hieradata/roles/apps/media.yaml
index 5d9259f..af903c3 100644
--- a/hieradata/roles/apps/media.yaml
+++ b/hieradata/roles/apps/media.yaml
@@ -11,3 +11,10 @@ profiles::yum::global::repos:
 profiles::ceph::client::keyrings:
   media:
     key: "%{hiera('ceph::key::media')}"
+
+profiles::base::groups::local:
+  media:
+    ensure: present
+    gid: 10001
+    allowdupe: false
+    forcelocal: true
diff --git a/hieradata/roles/apps/media/radarr.yaml b/hieradata/roles/apps/media/radarr.yaml
index b8475c0..1aaf845 100644
--- a/hieradata/roles/apps/media/radarr.yaml
+++ b/hieradata/roles/apps/media/radarr.yaml
@@ -6,7 +6,7 @@ hiera_include:
 # manage radarr
 radarr::params:
   user: radarr
-  group: radarr
+  group: media
   base_path: /opt/radarr
   install_path: /opt/radarr/bin
   archive_version: 5.7.0
diff --git a/hieradata/roles/apps/media/sonarr.yaml b/hieradata/roles/apps/media/sonarr.yaml
index 7bf8fc9..d058779 100644
--- a/hieradata/roles/apps/media/sonarr.yaml
+++ b/hieradata/roles/apps/media/sonarr.yaml
@@ -6,7 +6,7 @@ hiera_include:
 # manage sonarr
 sonarr::params:
   user: sonarr
-  group: sonarr
+  group: media
   base_path: /opt/sonarr
   install_path: /opt/sonarr/bin
   archive_version: 4.0.5