fix permissions for media directories

sys/machines/hopper/lab/navidrome/default.nix

@@ -3,6 +3,8 @@
   pkgs,
   ...
 }: {
+  users.users.navidrome.extraGroups = ["media"];
+
   services.navidrome = {
     enable = true;
     package = pkgs.navidrome.overrideAttrs {

sys/machines/hopper/lab/samba.nix

@@ -7,16 +7,22 @@
     extraGroups = ["transmission" "vault" "media"];
   };
 
+  users.users.media = {
+    isSystemUser = true;
+    group = "media";
+  };
+
   users.groups.vault = {};
   systemd.tmpfiles.rules = [
     "d /srv/vault 0770 root vault -"
+    "d /media/library 0770 media media -"
   ];
   services.samba = {
     enable = true;
     openFirewall = true;
     settings = {
       global = {
-        "log level" = 6;
+        "log level" = "3 passdb:5 auth:5";
         "log file" = "/var/log/samba/samba.log";
         "server string" = config.networking.hostName;
         "hosts allow" = "192.168.50.0/24";

sys/machines/hopper/lab/slskd.nix

@@ -8,6 +8,8 @@
     vpnNamespace = "wg";
   };
 
+  users.users.slskd.extraGroups = ["media"];
+
   services.slskd = {
     enable = true;
     environmentFile = config.sops.secrets.slskd.path;