{ pkgs, ... }:
{
  users.groups.multimedia = { };

  services.sonarr = {
    enable = true;
    openFirewall = true;
  };

  # See https://github.com/NixOS/nixpkgs/issues/360592
  nixpkgs.config.permittedInsecurePackages = [
    "aspnetcore-runtime-6.0.36"
    "aspnetcore-runtime-wrapped-6.0.36"
    "dotnet-sdk-6.0.428"
    "dotnet-sdk-wrapped-6.0.428"
  ];

  users.extraUsers.sonarr = {
    extraGroups = [ "sonarr" "multimedia" ];
  };

}