all repos — nixfiles @ 9525fa508cedd4df6879f847441206600008bc65

System and user configuration, managed by nix and home-manager

linde: set up jellyfin

Alan Pearce
commit

9525fa508cedd4df6879f847441206600008bc65

parent

a1d9242173dc8e3b15ff870826cd39a44688c8bc

3 files changed, 35 insertions(+), 0 deletions(-)

changed files
A secrets/cifs-jellyfin.age
@@ -0,0 +1,8 @@
+age-encryption.org/v1
+-> ssh-ed25519 cvV2sw Y5urF2AcQhGkiTm2xdVgD9b5epLK7SFBkyNxcgEG3ns
+yrN3Nzw5YhWnZ3Syu7x4AdeWFN+xdRqgB6VGosWyln4
+-> piv-p256 VBDKjg AzjFztk2aCm98qGtmr6ZxC/fVuUalDDKjmMSeNptxGII
+3gHoND+1x4JGSNogyM575F3/RVKE649Y1yHyK4NdtQk
+--- 8AB4+1eR4syO3BmrR1XsL96aukNJu1IAyz43U7WvrJQ
+EPccZ5
+
ᩐтIj!ip>n}`R"`
M secrets/secrets.nix → secrets/secrets.nix
@@ -27,6 +27,7 @@ photoprism = [ linde ];
     cifs-photoprism = [ linde ];
     cifs-paperless = [ linde ];
     cifs-transmission = [ linde ];
+    cifs-jellyfin = [ linde ];
 
     dyndns = [ nano ];
     syncthing = [ nano ];
M system/hosts/linde.nix → system/hosts/linde.nix
@@ -51,6 +51,7 @@ acme.file = ../../secrets/acme.age;
     binarycache.file = ../../secrets/binarycache.age;
     powerdns.file = ../../secrets/powerdns.age;
     redis-website.file = ../../secrets/redis-website.age;
+    cifs-jellyfin.file = ../../secrets/cifs-jellyfin.age;
     cifs-paperless.file = ../../secrets/cifs-paperless.age;
     cifs-transmission.file = ../../secrets/cifs-transmission.age;
     forgejo-actions-runner.file = ../../secrets/forgejo-actions-runner.age;

@@ -776,6 +777,11 @@ bind [${gitpr6}]
               reverse_proxy ${srv.host}:${toString srv.web_port}
             '';
           };
+        "jf.${domain}" = {
+          extraConfig = ''
+            reverse_proxy localhost:8096
+          '';
+        };
       };
   };
   systemd.services.caddy.serviceConfig = {

@@ -1273,6 +1279,26 @@ virtualisation.podman = {
     autoPrune = {
       enable = true;
     };
+  };
+
+  fileSystems."/srv/video" = {
+    device = "//u439959-sub5.your-storagebox.de/u439959-sub5";
+    fsType = "smb3";
+    options = [
+      "x-systemd.automount"
+      "noauto"
+      "x-systemd.mount-timeout=5s"
+      "credentials=${config.age.secrets.cifs-jellyfin.path}"
+      "seal"
+      "multichannel"
+      "forceuid"
+      "forcegid"
+      "uid=jellyfin"
+      "gid=jellyfin"
+    ];
+  };
+  services.jellyfin = {
+    enable = true;
   };
 
   fileSystems."/srv/transmission" = {