feat: add media server

modules/20-services-apps/sabnzbd/README.md

@@ -0,0 +1,78 @@
+# Sabnzbd Module
+
+This module deploys Sabnzbd as a Docker container and outputs a non-published service definition.
+
+## Overview
+
+- Container: `sabnzbd` (LinuxServer.io)
+- Web UI on TCP 8080
+- Mounts `/config` and `/downloads`
+
+## Usage
+
+```hcl
+module "sabnzbd" {
+  source         = "./modules/20-services-apps/sabnzbd"
+  volume_path    = "/srv/appdata/sabnzbd" # host path for app config
+  downloads_path = "/srv/data/usenet"     # host path for usenet downloads
+  networks       = [module.media_docker_network.name, module.homelab_docker_network.name]
+}
+```
+
+## Variables
+
+| Variable         | Description                                 | Type           | Default |
+| ---------------- | ------------------------------------------- | -------------- | ------- |
+| `volume_path`    | Base directory for Sabnzbd config            | `string`       | -       |
+| `downloads_path` | Directory for downloads mounted at /downloads | `string`      | -       |
+| `networks`       | List of networks to attach                   | `list(string)` | `[]`    |
+
+## Outputs
+
+| Output               | Description                    |
+| -------------------- | ------------------------------ |
+| `service_definition` | Service definition for integration with networking modules |
+
+## Service Definition
+
+This module outputs a service definition that is used by the networking modules. Sabnzbd is not published externally.
+
+```hcl
+{
+  name         = "sabnzbd"
+  primary_port = 8080
+  endpoint     = "http://sabnzbd:8080"
+}
+```
+
+## Environment Variables
+
+- `TZ`, `PUID`, and `PGID` are injected automatically via system globals in the generic docker-service module.
+
+## Data Persistence
+
+- `/config` -> `${volume_path}`
+- `/downloads` -> `${downloads_path}`
+- Ensure host paths exist and permissions align with the container user.
+
+## Networking
+
+- Attaches to `networks` (typically media and homelab). Not published externally; accessible internally.
+
+## Dependencies
+
+- No explicit inter-container dependencies. Healthcheck ensures readiness.
+
+## Example Integration in Main Configuration
+
+```hcl
+# In services/main.tf
+module "sabnzbd" {
+  source         = "${local.module_dir}/20-services-apps/sabnzbd"
+  volume_path    = "${local.volume_host}/sabnzbd"
+  downloads_path = "${local.data_host}/usenet"
+  networks       = [module.media_docker_network.name, module.homelab_docker_network.name]
+}
+```
+
+The service definition is exported by the `services` module as `module.services.service_definitions` and consumed by networking modules in the root `main.tf`.

modules/20-services-apps/sabnzbd/main.tf

@@ -0,0 +1,69 @@
+variable "volume_path" {
+  description = "Base directory for Sabnzbd config"
+  type        = string
+}
+variable "downloads_path" {
+  description = "Directory for downloads mounted at /downloads"
+  type        = string
+}
+variable "networks" {
+  description = "List of networks to attach"
+  type        = list(string)
+  default     = []
+}
+
+locals {
+  container_name = "sabnzbd"
+  image          = "lscr.io/linuxserver/sabnzbd"
+  tag            = "latest"
+  monitoring     = true
+  internal_port  = 8080
+
+  env_vars = {
+    # Add typical env like PUID/PGID/TZ if desired via the generic module interface
+  }
+
+  volumes = [
+    {
+      host_path      = var.volume_path,
+      container_path = "/config",
+      read_only      = false
+    },
+    {
+      host_path      = var.downloads_path,
+      container_path = "/data/usenet/downloads",
+      read_only      = false
+    }
+  ]
+
+  healthcheck = {
+    test     = ["CMD", "curl", "--fail", "http://127.0.0.1:8080"]
+    interval = "60s"
+    timeout  = "5s"
+    retries  = 10
+  }
+}
+
+module "sabnzbd" {
+  source         = "../../10-services-generic/docker-service"
+  container_name = local.container_name
+  image          = local.image
+  tag            = local.tag
+  env_vars       = local.env_vars
+  volumes        = local.volumes
+  networks       = var.networks
+  monitoring     = local.monitoring
+  healthcheck    = local.healthcheck
+}
+
+output "service_definition" {
+  description = "Service definition for Sabnzbd (not published)"
+  value = {
+    name         = local.container_name
+    primary_port = local.internal_port
+    endpoint     = "http://${local.container_name}:${local.internal_port}"
+    subdomains   = ["sabnzbd"]
+    publish_via  = "tunnel"
+    proxied      = true
+  }
+}