From e4501bf124f160d271af5bdbda7c9f1a86fdd013 Mon Sep 17 00:00:00 2001
From: ibizaman <ibizapeanut@gmail.com>
Date: Mon, 8 Apr 2024 23:39:33 -0700
Subject: [PATCH] disable auth for arr if authEndpoint is set
---
modules/services/arr.nix | 14 ++++++++++++--
1 file changed, 12 insertions(+), 2 deletions(-)
diff --git a/modules/services/arr.nix b/modules/services/arr.nix
index e4ca042..895d0c1 100644
--- a/modules/services/arr.nix
+++ b/modules/services/arr.nix
@@ -385,6 +385,7 @@ in
(lib.mkIf cfg.radarr.enable (
let
cfg' = cfg.radarr;
+ isSSOEnabled = !(isNull cfg'.authEndpoint);
in
{
services.nginx.enable = true;
@@ -399,7 +400,11 @@ in
};
systemd.services.radarr.preStart = shblib.replaceSecrets {
- userConfig = cfg'.settings;
+ userConfig = cfg'.settings
+ // (lib.optionalAttrs isSSOEnabled {
+ AuthenticationRequired = "DisabledForLocalAddresses";
+ AuthenticationMethod = "External";
+ });
resultPath = "${config.services.radarr.dataDir}/config.xml";
generator = apps.radarr.settingsFormat.generate;
};
@@ -417,6 +422,7 @@ in
(lib.mkIf cfg.sonarr.enable (
let
cfg' = cfg.sonarr;
+ isSSOEnabled = !(isNull cfg'.authEndpoint);
in
{
services.nginx.enable = true;
@@ -430,7 +436,11 @@ in
};
systemd.services.sonarr.preStart = shblib.replaceSecrets {
- userConfig = cfg'.settings;
+ userConfig = cfg'.settings
+ // (lib.optionalAttrs isSSOEnabled {
+ AuthenticationRequired = "DisabledForLocalAddresses";
+ AuthenticationMethod = "External";
+ });
resultPath = "${config.services.sonarr.dataDir}/config.xml";
generator = apps.sonarr.settingsFormat.generate;
};