{ lib, ... }:
{
  # HTTP Traffic: 8096
  # HTTPS Traffic: 8920
  # Service Discovery: 1900
  # Client Discovery: 7359 UDP

  users.groups.media.members = [ "jellyfin" ];

  systemd.services.jellyfin.serviceConfig.UMask = lib.mkForce "0007";

  services.jellyfin = {
    enable = true;
    openFirewall = true;
  };
}