feat: add media user to all media roles

- change *arrs to use media as the group

doc/admin/groups.md

@@ -0,0 +1,9 @@
+# Group administration
+
+This page exists to list all the locally managed groups, their gid's and what their general purpose is for.
+
+## List of groups
+| name        | gid         | purpose     |
+|-------------|-------------|-------------|
+| admin | 10000 | admin group designed for system admins |
+| media | 10001 | group permissions to manage media (*arrs) |

hieradata/roles/apps/media.yaml

@@ -11,3 +11,10 @@ profiles::yum::global::repos:
 profiles::ceph::client::keyrings:
   media:
     key: "%{hiera('ceph::key::media')}"
+
+profiles::base::groups::local:
+  media:
+    ensure: present
+    gid: 10001
+    allowdupe: false
+    forcelocal: true

hieradata/roles/apps/media/radarr.yaml

@@ -6,7 +6,7 @@ hiera_include:
 # manage radarr
 radarr::params:
   user: radarr
-  group: radarr
+  group: media
   base_path: /opt/radarr
   install_path: /opt/radarr/bin
   archive_version: 5.7.0

hieradata/roles/apps/media/sonarr.yaml

@@ -6,7 +6,7 @@ hiera_include:
 # manage sonarr
 sonarr::params:
   user: sonarr
-  group: sonarr
+  group: media
   base_path: /opt/sonarr
   install_path: /opt/sonarr/bin
   archive_version: 4.0.5