Skip to content

docs: add the writable games SMB share and win01 G: drive #54

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jmgilman merged 1 commit into from
Oct 17, 2026
Merged

docs: add the writable games SMB share and win01 G: drive #54

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 5 additions & 2 deletions docs/docs/runbooks/media-stack.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,7 @@ lists the resources and volumes.
| SABnzbd | `http://10.10.50.20:8085` |
| Library share (SMB, read-only) | `smb://10.10.50.20/media` |
| Downloads share (SMB, read-only) | `smb://10.10.50.20/torrents` |
| Games share (SMB, writable) | `smb://10.10.50.20/games` |

The address and VLAN are canonical in the
[address plan](../reference/networking/address-plan.md). Home clients reach
Expand Down Expand Up @@ -90,12 +91,14 @@ any container.

## Copy files from the SMB shares

Two shares, both read-only for the `media` account:
Three shares for the `media` account. Only `games` is writable, so a client
running untrusted software can damage the games folder but never movies or TV:

| Share | Path | Contents |
| --- | --- | --- |
| `media` | `/data/media` | The imported library: `games`, `movies`, `tv` |
| `torrents` | `/data/torrents` | qBittorrent downloads, including releases no app imported. Read-only so nothing can alter a file that is still seeding. |
| `games` | `/data/media/games` | Writable: put rebuilt game files (for example NSPs extracted by a repack installer) back into the library. New files are `media`-owned, mode `0664`, so Gamarr can manage them. |

The password is in `GilmanLab/secrets` `services/media/smb.sops.yaml`; copy it
to the clipboard with:
Expand All @@ -106,7 +109,7 @@ AWS_PROFILE=lab-admin sops decrypt --extract '["smb"]["password"]' \
```

In Finder, **Go → Connect to Server** (`⌘K`), enter `smb://10.10.50.20/media`
or `smb://10.10.50.20/torrents`,
`smb://10.10.50.20/torrents`, or `smb://10.10.50.20/games`,
choose **Registered User**, name `media`, paste the password, and save it in
the keychain. To change the password, edit the secret and rerun
`just deliver-smb`.
Expand Down
5 changes: 3 additions & 2 deletions docs/docs/runbooks/windows-vm.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -81,8 +81,9 @@ just remove-install-media
`10.10.50.30`, user `josh`, and paste the password.

The media library (`\\10.10.50.20\media`) is mapped as drive `M:` and the
download area (`\\10.10.50.20\torrents`) as `T:`, both read-only and
reconnected at every logon for `josh`. Both use the `media` account, whose
download area (`\\10.10.50.20\torrents`) as `T:`, both read-only, and the
writable games folder (`\\10.10.50.20\games`) as `G:`. All three reconnect at
every logon for `josh` and use the `media` account, whose
password from the media stack runbook is saved in Windows Credential Manager
(target
`10.10.50.20`). After a password change, rerun
Expand Down
Loading