3 files changed, 39 insertions, 1 deletions
diff --git a/hosts/ahmed/configuration.nix b/hosts/ahmed/configuration.nix
index 27c35eb..9d49d32 100644
--- a/hosts/ahmed/configuration.nix
+++ b/hosts/ahmed/configuration.nix
@@ -17,6 +17,7 @@
     ./linus.onl
     ./nofitications.linus.onl
     ./ssh
+    ./torrenting
     ./home
   ];
 
diff --git a/hosts/ahmed/hellohtml.linus.onl/default.nix b/hosts/ahmed/hellohtml.linus.onl/default.nix
index 4859ed3..f973c11 100644
--- a/hosts/ahmed/hellohtml.linus.onl/default.nix
+++ b/hosts/ahmed/hellohtml.linus.onl/default.nix
@@ -20,7 +20,7 @@ in {
     ];
 
     # Use NGINX as reverse proxy.
-    services.nginx.virtualHosts.${mainDomain}= {
+    services.nginx.virtualHosts.${mainDomain} = {
       # Set up secondary domain name to also point to this host. Only the
       # client (browser) should treat these as separate. On the server, they
       # are the same.
diff --git a/hosts/ahmed/torrenting/default.nix b/hosts/ahmed/torrenting/default.nix
new file mode 100644
index 0000000..c49baa6
--- /dev/null
+++ b/hosts/ahmed/torrenting/default.nix
@@ -0,0 +1,37 @@
+# This module configures the my torrenting setup. It uses qBittorrent over a VPN.
+{pkgs, options, config, ...}: let
+  downloadPath = "/srv/media/";
+
+  interface = "tun0";
+in {
+  # Configure the actual qBittorrent service.
+  services.qbittorrent = {
+    enable = true;
+
+    openFirewall = true; # TEMP: reverse proxy will cover this instead
+
+    settings = {
+      BitTorrent = {
+        # Use the specified download path for finished torrents.
+        "Session\\DefaultSavePath" = downloadPath;
+        "Session\\TempPath" = "${config.services.qbittorrent.profile}/qBittorrent/temp";
+        "Session\\TempPathEnabled" = true;
+      };
+
+      # Instruct qBittorrent to only use VPN interface.
+    };
+  };
+
+  # Create the directory to which media will be downloaded.
+  # This is also used by Jellyfin to serve the files.
+  systemd.tmpfiles.rules = let
+    user = options.services.qbittorrent.user.default;
+    group = options.services.qbittorrent.group.default;
+  in [
+    "d ${downloadPath} 0755 ${user} ${group}"
+  ];
+
+  # Create a connection to Mullvad's WireGuard server.
+
+  # Use NGINX as a reverse proxy for qBittorrent's WebUI.
+}