feat(APPA): add jellyfin

hosts/APPA/services/adguard-home.nix

@@ -58,6 +58,10 @@
             domain = "paperless.dryb.org";
             answer = "192.168.2.40";
           }
+          {
+            domain = "jellyfin.dryb.org";
+            answer = "192.168.2.40";
+          }
         ];
       };
       dhcp = {

hosts/APPA/services/default.nix

@@ -6,6 +6,7 @@
     ./ddclient.nix
     ./gitea.nix
     ./homepage-dashboard.nix
+    ./jellyfin.nix
     ./nextcloud.nix
     ./nginx.nix
     ./paperless.nix

hosts/APPA/services/jellyfin.nix

@@ -0,0 +1,14 @@
+{ config, ... }:
+{
+  # HTTP Traffic: 8096
+  # HTTPS Traffic: 8920
+  # Service Discovery: 1900
+  # Client Discovery: 7359 UDP
+
+  users.groups."${config.services.jellyfin.group}".members = [ "nextcloud" ];
+
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}

hosts/APPA/services/nginx.nix

@@ -50,6 +50,13 @@
         proxyPass = "http://127.0.0.1:8006";
       };
     };
+    virtualHosts."jellyfin.dryb.org" = {
+      useACMEHost = "dryb.org";
+      forceSSL = true;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:8096";
+      };
+    };
   };
 
   networking.firewall = {