From e0dd664883641a0c22137dac383539b28e8d9c5d Mon Sep 17 00:00:00 2001
From: Jan Kremer <mail@jankremer.eu>
Date: Tue, 10 Mar 2026 11:26:52 +0100
Subject: [PATCH] Create media group

---
 hosts/galanthus/configuration.nix |  4 ++++
 modules/nixos/copyparty.nix       |  2 ++
 modules/nixos/immich.nix          | 14 +++++++-------
 modules/nixos/jellyfin.nix        |  1 +
 modules/nixos/paperless.nix       |  1 +
 modules/nixos/samba.nix           |  2 --
 6 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/hosts/galanthus/configuration.nix b/hosts/galanthus/configuration.nix
index 3783660..6be4aa5 100644
--- a/hosts/galanthus/configuration.nix
+++ b/hosts/galanthus/configuration.nix
@@ -41,12 +41,16 @@
     };
   };
 
+  ## Create media group
+  users.groups.media = { };
+
   users.users.jan = {
     isNormalUser = true;
     description = "Jan Kremer";
     extraGroups = [
       "networkmanager"
       "wheel"
+      "media"
     ];
   };
 
diff --git a/modules/nixos/copyparty.nix b/modules/nixos/copyparty.nix
index 7125287..f71605b 100644
--- a/modules/nixos/copyparty.nix
+++ b/modules/nixos/copyparty.nix
@@ -51,4 +51,6 @@
       };
     };
   };
+
+  users.users.copyparty.extraGroups = [ "media" ];
 }
diff --git a/modules/nixos/immich.nix b/modules/nixos/immich.nix
index 06c2dab..e1d7680 100644
--- a/modules/nixos/immich.nix
+++ b/modules/nixos/immich.nix
@@ -1,10 +1,10 @@
 {
-  services = {
-    immich = {
-      enable = true;
-      # port = 2283;
-      accelerationDevices = [ "/dev/dri/renderD128" ];
-      mediaLocation = "/mnt/photos";
-    };
+  services.immich = {
+    enable = true;
+    # port = 2283;
+    accelerationDevices = [ "/dev/dri/renderD128" ];
+    mediaLocation = "/mnt/photos";
   };
+
+  users.users.immich.extraGroups = [ "media" ];
 }
diff --git a/modules/nixos/jellyfin.nix b/modules/nixos/jellyfin.nix
index f893e5d..7f2ea2a 100644
--- a/modules/nixos/jellyfin.nix
+++ b/modules/nixos/jellyfin.nix
@@ -6,6 +6,7 @@
     pkgs.jellyfin-web
     pkgs.jellyfin-ffmpeg
   ];
+  users.users.jellyfin.extraGroups = [ "media" ];
 
   ## Grab EPG data daily
   virtualisation.oci-containers = {
diff --git a/modules/nixos/paperless.nix b/modules/nixos/paperless.nix
index 8f00580..59f5cb8 100644
--- a/modules/nixos/paperless.nix
+++ b/modules/nixos/paperless.nix
@@ -14,4 +14,5 @@
       PAPERLESS_OCR_LANGUAGE = "deu+eng";
     };
   };
+  users.users.paperless.extraGroups = [ "media" ];
 }
diff --git a/modules/nixos/samba.nix b/modules/nixos/samba.nix
index f458763..5d5f39c 100644
--- a/modules/nixos/samba.nix
+++ b/modules/nixos/samba.nix
@@ -39,6 +39,4 @@
     publish.enable = true;
     publish.userServices = true;
   };
-
-  users.users.jan.extraGroups = [ "samba" ];
 }