fixes qbittorrent, nextcloud python update, firewall logic

modules/servers/nextcloud.nix

@@ -29,7 +29,7 @@ let
       };
     }
   );
-  pytensorflow = pkgs.python311.withPackages (ps: [ ps.tensorflow ]);
+  pytensorflow = pkgs.python3.withPackages (ps: [ ps.tensorflow ]);
   cfg = config.my.servers.nextcloud;
   cfgC = config.my.servers.collabora;
 in

modules/servers/qbittorrent.nix

@@ -36,6 +36,10 @@ let
         ;
     }
   );
+  torrentCompletionScript = pkgs.writeShellScript "qbit-torrent-completion" ''
+    chown jawz:piracy -R "$1"
+    chmod -R 775 "$1"
+  '';
 in
 {
   options.my.servers = {
@@ -50,6 +54,7 @@ in
     };
   };
   config = lib.mkIf (config.my.servers.qbittorrent.enable && config.my.secureHost) {
+    my.network.firewall.additionalPorts = [ config.my.servers.qbittorrent.port ];
     home-manager.users.jawz.xdg.dataFile.vuetorrent.source = vuetorrent;
     sops.secrets =
       let
@@ -72,7 +77,10 @@ in
         "unpackerr/radarr-api" = mkUnpackerrSecret;
       };
     systemd = {
-      packages = [ pkgs.qbittorrent-nox ];
+      packages = [
+        pkgs.qbittorrent-nox
+        torrentCompletionScript
+      ];
       services."qbittorrent-nox@jawz" = {
         enable = true;
         overrideStrategy = "asDropin";

modules/servers/sabnzbd.nix

@@ -12,6 +12,7 @@ in
     };
   };
   config = lib.mkIf cfg.enable {
+    my.network.firewall.additionalPorts = [ cfg.port ];
     services.sabnzbd = {
       inherit (cfg) enable;
       group = "piracy";