Correct /storage permissions

hosts/plexy/default.nix

@@ -64,6 +64,7 @@
       22
       80
       443
+      873 # rsyncd
       5201 # iperf3
       15835 # Glance
     ];
@@ -78,9 +79,12 @@
 
     secrets = {
       "vaultwarden.env" = { };
+      "/etc/rsyncd.secrets" = { };
     };
   };
 
+  virtualisation.docker.enable = true;
+
   services = {
     openssh = {
       enable = true;
@@ -90,6 +94,26 @@
     iperf3 = {
       enable = true;
     };
+    rsyncd = {
+      enable = true;
+      settings = {
+        globalSection = {
+          address = "0.0.0.0";
+          gid = "users";
+          "max connections" = 5;
+          uid = "wekuz";
+        };
+        sections = {
+          storage = {
+            path = "/storage/media";
+            comment = "Media storage";
+            "read only" = false;
+            "auth users" = "wekuz";
+            "secrets file" = config.sops.secrets."rsyncd.secrets".path;
+          };
+        };
+      };
+    };
     vaultwarden = {
       enable = true;
       environmentFile = config.sops.secrets."vaultwarden.env".path;
@@ -123,5 +147,9 @@
     ];
   };
 
+  systemd.tmpfiles.rules = [
+    "d /storage 0777 root root -"
+  ];
+
   system.stateVersion = "25.11";
 }

hosts/plexy/disko-config.nix

@@ -54,6 +54,33 @@
           };
         };
       };
+      storagedisk = {
+        type = "disk";
+        device = "/dev/disk/by-id/ata-HGST_HUS722T2TALA604_WMC6N0P31NKZ";
+        content = {
+          type = "gpt";
+          partitions = {
+            primary = {
+              size = "100%";
+              content = {
+                type = "btrfs";
+                extraArgs = [ "-f" ]; # Override existing partition
+                subvolumes = {
+                  "@storage" = {
+                    mountOptions = [
+                      "compress=zstd"
+                      "noatime"
+                    ];
+                    mountpoint = "/storage";
+                  };
+                };
+
+                mountpoint = "/part-storage";
+              };
+            };
+          };
+        };
+      };
     };
   };
 }

hosts/plexy/home.nix

@@ -5,7 +5,7 @@
   home.homeDirectory = "/home/wekuz";
 
   home.packages = with pkgs; [
-    neofetch
+    fastfetch
 
     # Utilities
     neovim

hosts/plexy/secrets.yaml

@@ -1,4 +1,5 @@
 vaultwarden.env: ENC[AES256_GCM,data:PLNb5cFoJaOyUo5U/gpXH0RGVwwQxL3kCE/OLw7MaLWazuBGHIPUEhH+kDMP2cfF916D63w8Ddgb/oH+lHGCw235YwgoqZ9yjWYPG4VB2Jdw+17LeCbirdh3zv8nNzFnSZDJmhz5Pj82+iswju6sYO/H7UfZ3aeASWonKW9LGHVltKSY1rAVhZRu4SvhqPiAxNpEzN0/EDTl46RIxrgEoUraN+Ie8fh1wU9SKevExkPU3NXGO1gG2tWRxclMPgc=,iv:es40/5HpBAhOy2xmU/yCUD43fVVsAXk6qJ3OasKjK3U=,tag:bneErU9pPZkQ2VzbQ1NrJA==,type:str]
+rsyncd.secrets: ENC[AES256_GCM,data:VjHRoZa6/lDtCheKSJyM,iv:kxygNaKOuK0iH/bFY/uKxcbMcYSR8nWDUx+4aDNqTMk=,tag:uYYPWAPCWtvLLGwmOWyH+A==,type:str]
 sops:
     age:
         - recipient: age1sqssntfzzlhcgp0wuf9wmeavg0hmwmq349npsq8vaxj9sxey5s9ssc82sw
@@ -10,7 +11,7 @@ sops:
             eDUxR1V0ZEFSYnZTYnYzakFydEliaFUKoa/gHecAy01vTk7I02KMGGPHZBql5K48
             hkLDjoWK9dkGRX8kqRd028cuMCQRenLpULEECWp6oV+evUdMf7wRtg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2025-12-30T19:34:00Z"
-    mac: ENC[AES256_GCM,data:kFttJIQM/Zyd9xeiJpdEVoJ2AhlbuvtUxGBkQTQeEvrJsClAUM7s288XhkG02IxpH9bt2U6AgF60K/3E3qEdFHpM9WKTso/n6mXeD5WUyo9XD1XiWMPZ07arRLH0ajRWHOlIadKm7hvPhEWiWxVg9+sc0BHtjTGMLgvRhUyMPgM=,iv:gsMvU3lxVFSF8bJK5u9cNFSYDT5OZPmWqehv0ozB5Uo=,tag:XsfLCSTlqSgeKy609lMmLQ==,type:str]
+    lastmodified: "2026-04-03T15:46:07Z"
+    mac: ENC[AES256_GCM,data:gh9Voy28Lo4G1qwQ7/WVAt/L3SAXIY5bs5fdCE0Oywi0ZV4YTJI5VCAcfxuE0Fc3DXdHF0/LORGjKa2l0yp5msMdBVpzI46FBiwYvU+w7EfEoEmhu0yMLf0SZmXkVLEq8u2uVFHGVbR1dOKcdFef+qTIGTlz4cE9VQ01xg/nh7g=,iv:fasXOAm2hjB4ULKT4vPOFnFpAcEgSeNvNM7Zrnk6MvM=,tag:1hWtpuTVdC3H8flA1m0Z0A==,type:str]
     unencrypted_suffix: _unencrypted
-    version: 3.11.0
+    version: 3.12.2