From aac276e15457178187cb3ff56bf0289325be9862 Mon Sep 17 00:00:00 2001
From: Jacob Bachmann <jacob.bachmann@posteo.de>
Date: Wed, 2 Oct 2024 20:04:33 +0200
Subject: [PATCH] feat(APPA): add jellyfin

---
 hosts/APPA/services/adguard-home.nix |  4 ++++
 hosts/APPA/services/default.nix      |  1 +
 hosts/APPA/services/jellyfin.nix     | 14 ++++++++++++++
 hosts/APPA/services/nginx.nix        |  7 +++++++
 4 files changed, 26 insertions(+)
 create mode 100644 hosts/APPA/services/jellyfin.nix

diff --git a/hosts/APPA/services/adguard-home.nix b/hosts/APPA/services/adguard-home.nix
index aa509bb..e0b2b74 100644
--- a/hosts/APPA/services/adguard-home.nix
+++ b/hosts/APPA/services/adguard-home.nix
@@ -58,6 +58,10 @@
             domain = "paperless.dryb.org";
             answer = "192.168.2.40";
           }
+          {
+            domain = "jellyfin.dryb.org";
+            answer = "192.168.2.40";
+          }
         ];
       };
       dhcp = {
diff --git a/hosts/APPA/services/default.nix b/hosts/APPA/services/default.nix
index 5460eaa..87c397f 100644
--- a/hosts/APPA/services/default.nix
+++ b/hosts/APPA/services/default.nix
@@ -6,6 +6,7 @@
     ./ddclient.nix
     ./gitea.nix
     ./homepage-dashboard.nix
+    ./jellyfin.nix
     ./nextcloud.nix
     ./nginx.nix
     ./paperless.nix
diff --git a/hosts/APPA/services/jellyfin.nix b/hosts/APPA/services/jellyfin.nix
new file mode 100644
index 0000000..c52a3c6
--- /dev/null
+++ b/hosts/APPA/services/jellyfin.nix
@@ -0,0 +1,14 @@
+{ config, ... }:
+{
+  # HTTP Traffic: 8096
+  # HTTPS Traffic: 8920
+  # Service Discovery: 1900
+  # Client Discovery: 7359 UDP
+
+  users.groups."${config.services.jellyfin.group}".members = [ "nextcloud" ];
+
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}
diff --git a/hosts/APPA/services/nginx.nix b/hosts/APPA/services/nginx.nix
index 5f77ca9..49ac1b3 100644
--- a/hosts/APPA/services/nginx.nix
+++ b/hosts/APPA/services/nginx.nix
@@ -50,6 +50,13 @@
         proxyPass = "http://127.0.0.1:8006";
       };
     };
+    virtualHosts."jellyfin.dryb.org" = {
+      useACMEHost = "dryb.org";
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8096";
+      };
+    };
   };
 
   networking.firewall = {