diff --git a/hosts/APPA/services/adguard-home.nix b/hosts/APPA/services/adguard-home.nix
index aa509bb..e0b2b74 100644
--- a/hosts/APPA/services/adguard-home.nix
+++ b/hosts/APPA/services/adguard-home.nix
@@ -58,6 +58,10 @@
             domain = "paperless.dryb.org";
             answer = "192.168.2.40";
           }
+          {
+            domain = "jellyfin.dryb.org";
+            answer = "192.168.2.40";
+          }
         ];
       };
       dhcp = {
diff --git a/hosts/APPA/services/default.nix b/hosts/APPA/services/default.nix
index 5460eaa..87c397f 100644
--- a/hosts/APPA/services/default.nix
+++ b/hosts/APPA/services/default.nix
@@ -6,6 +6,7 @@
     ./ddclient.nix
     ./gitea.nix
     ./homepage-dashboard.nix
+    ./jellyfin.nix
     ./nextcloud.nix
     ./nginx.nix
     ./paperless.nix
diff --git a/hosts/APPA/services/jellyfin.nix b/hosts/APPA/services/jellyfin.nix
new file mode 100644
index 0000000..c52a3c6
--- /dev/null
+++ b/hosts/APPA/services/jellyfin.nix
@@ -0,0 +1,14 @@
+{ config, ... }:
+{
+  # HTTP Traffic: 8096
+  # HTTPS Traffic: 8920
+  # Service Discovery: 1900
+  # Client Discovery: 7359 UDP
+
+  users.groups."${config.services.jellyfin.group}".members = [ "nextcloud" ];
+
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}
diff --git a/hosts/APPA/services/nginx.nix b/hosts/APPA/services/nginx.nix
index 5f77ca9..49ac1b3 100644
--- a/hosts/APPA/services/nginx.nix
+++ b/hosts/APPA/services/nginx.nix
@@ -50,6 +50,13 @@
         proxyPass = "http://127.0.0.1:8006";
       };
     };
+    virtualHosts."jellyfin.dryb.org" = {
+      useACMEHost = "dryb.org";
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8096";
+      };
+    };
   };
 
   networking.firewall = {