add config to copyparty

modules/holocron/copyparty/default.nix

@@ -63,25 +63,45 @@ in {
     # enable the ${service} service
     services.${service} = {
       enable = true;
-      #      settings = {
-      #      };
-      #      accounts = {
-      #      };
-      #      groups = {
-      #      };
-      #      volumes = {
-      #        flags = {
-      #        };
-      #      };
+      user = service;
+      group = service;
+      settings = {
+        i = "0.0.0.0";
+        p = [7902];
+      };
+      accounts = {
+        blake = {
+          passwordFile = sec."copyparty_passwd".path;
+        };
+      };
+      groups = {
+        media = ["blake"];
+      };
+      volumes = {
+        "/archives" = {
+          path = "/holocron/archives";
+          access = {
+            r = "*";
+            A = "blake";
+          };
+        };
+        "/media" = {
+          path = "/holocron/media";
+          access = {
+            r = "*";
+            w = "@media";
+            A = "blake";
+          };
+        };
+        "/users/blake" = {
+          path = "/holocron/users/blake";
+          access = {
+            A = "blake";
+          };
+        };
+      };
     };
 
-    #    # override umask to make permissions work out
-    #    systemd.services.${service}.serviceConfig = {
-    #      UMask = lib.mkForce "0007";
-    #      #      User = service;
-    #      #      Group = service;
-    #    };
-
     # open firewall
     networking.firewall.allowedTCPPorts = [cfg.port];
 
@@ -104,13 +124,13 @@ in {
         icon = "di:${service}";
       }
     ];
-    #
-    #    sops.secrets = {
-    #      "${service}_" = {
-    #        owner = ;
-    #        group = ;
-    #      };
-    #    };
+
+    sops.secrets = {
+      "${service}_passwd" = {
+        owner = service;
+        group = service;
+      };
+    };
 
     # add to backups
     system.backups.baks = {