Aner Zakobar
0b73d493d8
- Fix Caddy cfProxy helper for cloudflared http:// vhosts (X-Forwarded-Proto) - Fix Authelia LDAP bind (readonly user ACL + password sync) - Add gitea-admin-setup oneshot service to survive rebuilds - Update Authelia forward_auth with header_up X-Forwarded-Proto https - Update TODO.org with completed tasks and LDAP config details - Remove old Helm/k8s artifacts (Chart.yaml, templates/, values/, scripts) - Add result to .gitignore Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
56 lines
1.4 KiB
Nix
56 lines
1.4 KiB
Nix
{ config, lib, pkgs, homeyConfig, ... }:
|
|
|
|
# Jellyfin — media server. (Deferred — enable when ready.)
|
|
#
|
|
# Volume layout:
|
|
# <dataDir>/jellyfin/config/ → /config
|
|
# <dataDir>/media/movies/ → /data/movies
|
|
# <dataDir>/media/tvshows/ → /data/tvshows
|
|
|
|
let
|
|
cfg = config.homey.jellyfin;
|
|
dataDir = config.homey.storage.mountPoint;
|
|
domain = homeyConfig.domain;
|
|
in
|
|
{
|
|
options.homey.jellyfin = {
|
|
enable = lib.mkEnableOption "Jellyfin media server";
|
|
|
|
image = lib.mkOption {
|
|
type = lib.types.str;
|
|
default = "docker.io/jellyfin/jellyfin:latest";
|
|
};
|
|
|
|
port = lib.mkOption {
|
|
type = lib.types.port;
|
|
default = 8096;
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
virtualisation.oci-containers.containers.jellyfin = {
|
|
image = cfg.image;
|
|
# No ports mapping — --network=host shares the host network stack directly.
|
|
|
|
environment = {
|
|
JELLYFIN_PublishedServerUrl = "https://jellyfin.${domain}";
|
|
PUID = "1000";
|
|
PGID = "1000";
|
|
};
|
|
|
|
volumes = [
|
|
"${dataDir}/jellyfin/config:/config"
|
|
"${dataDir}/media/movies:/data/movies:ro"
|
|
"${dataDir}/media/tvshows:/data/tvshows:ro"
|
|
];
|
|
|
|
extraOptions = [ "--network=host" ];
|
|
};
|
|
|
|
systemd.services."podman-jellyfin" = {
|
|
after = lib.mkAfter [ "mnt-data.mount" ];
|
|
requires = lib.mkAfter [ "mnt-data.mount" ];
|
|
};
|
|
};
|
|
}
|