add radarr and prowlarr to docker media stack

docker_swarm/roles/media/docker-stack.yml.j2

@@ -26,6 +26,16 @@ volumes:
       type: "nfs"
       o: "addr=lewis.dmz,nolock,soft,rw"
       device: ":/mnt/data/nfs/jellyseerr/config"
+  radarr_config:
+    driver_opts:
+      type: "nfs"
+      o: "addr=lewis.dmz,nolock,soft,rw"
+      device: ":/mnt/data/nfs/radarr/config"
+  prowlarr_config:
+    driver_opts:
+      type: "nfs"
+      o: "addr=lewis.dmz,nolock,soft,rw"
+      device: ":/mnt/data/nfs/prowlarr/config"
   jellyfin_cache:
 
 services:
@@ -120,3 +130,58 @@ services:
         - traefik.http.routers.jellyseerr.service=jellyseerr
         - traefik.http.services.jellyseerr.loadbalancer.server.port=5055
         - traefik.docker.network=traefik
+
+  radarr:
+    image: lscr.io/linuxserver/radarr:latest
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Amsterdam
+    volumes:
+      - type: volume
+        source: radarr_config
+        target: /config
+        volume:
+          nocopy: true
+      - type: volume
+        source: media
+        target: /media
+        volume:
+          nocopy: true
+    networks:
+      - traefik
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.radarr.entrypoints=localsecure
+        - traefik.http.routers.radarr.rule=Host(`radarr.kun.is`)
+        - traefik.http.routers.radarr.tls=true
+        - traefik.http.routers.radarr.tls.certresolver=letsencrypt
+        - traefik.http.routers.radarr.service=radarr
+        - traefik.http.services.radarr.loadbalancer.server.port=7878
+        - traefik.docker.network=traefik
+
+  prowlarr:
+    image: lscr.io/linuxserver/prowlarr:latest
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Amsterdam
+    volumes:
+      - type: volume
+        source: prowlarr_config
+        target: /config
+        volume:
+          nocopy: true
+    networks:
+      - traefik
+    deploy:
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.prowlarr.entrypoints=localsecure
+        - traefik.http.routers.prowlarr.rule=Host(`prowlarr.kun.is`)
+        - traefik.http.routers.prowlarr.tls=true
+        - traefik.http.routers.prowlarr.tls.certresolver=letsencrypt
+        - traefik.http.routers.prowlarr.service=prowlarr
+        - traefik.http.services.prowlarr.loadbalancer.server.port=9696
+        - traefik.docker.network=traefik

nixos/modules/data-sharing.nix

@@ -24,6 +24,8 @@ let
     "/jellyfin/config"
     "/transmission/config"
     "/jellyseerr/config"
+    "/radarr/config"
+    "/prowlarr/config"
   ];
 
   nfsExports = lib.strings.concatLines (