Adding Jellyfin

flake.lock

@@ -173,11 +173,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1767702900,
-        "narHash": "sha256-xMzHmNytl7JgFRov2jHf2GYsLVp/sAfYO0JvbZt0uDo=",
+        "lastModified": 1767738364,
+        "narHash": "sha256-rmAerMcKMYusVs5B88RAKAYUiENrO+d4bjvpQkkaaks=",
         "owner": "nix-community",
         "repo": "home-manager",
-        "rev": "38e187fd2f9efac197e03be0c25f3ee215974144",
+        "rev": "4e8b7bef66c60735982369f3151b93e62fe37da7",
         "type": "github"
       },
       "original": {
@@ -311,11 +311,11 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1767379071,
-        "narHash": "sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf+Okucw=",
+        "lastModified": 1767640445,
+        "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "fb7944c166a3b630f177938e478f0378e64ce108",
+        "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5",
         "type": "github"
       },
       "original": {
@@ -327,11 +327,11 @@
     },
     "nixpkgs_2": {
       "locked": {
-        "lastModified": 1767379071,
-        "narHash": "sha256-EgE0pxsrW9jp9YFMkHL9JMXxcqi/OoumPJYwf+Okucw=",
+        "lastModified": 1767640445,
+        "narHash": "sha256-UWYqmD7JFBEDBHWYcqE6s6c77pWdcU/i+bwD6XxMb8A=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "fb7944c166a3b630f177938e478f0378e64ce108",
+        "rev": "9f0c42f8bc7151b8e7e5840fb3bd454ad850d8c5",
         "type": "github"
       },
       "original": {

hosts/zora/default.nix

@@ -23,6 +23,7 @@
       ../../modules/server/nayru
       ../../modules/server/kalif
       ../../modules/server/maistro
+      ../../modules/server/mikau
       ../../modules/server/biggoron
       ../../modules/server/biggoron/runner.nix
 

hosts/zora/reverse-proxy.nix

@@ -69,6 +69,27 @@
           proxyWebsockets = true; # collabora a besoin des websockets
         };
       };
+
+      # 8096
+      "media.lyes.eu" = {
+        forceSSL = true;
+        enableACME = true;
+        locations = {
+          "/".proxyPass = "http://localhost:8096";
+          "/metrics" = {
+            proxyPass = "http://localhost:8096";
+            extraConfig = ''
+              allow 127.0.0.1;
+              allow ::1;
+              allow 185.230.78.13;
+              allow 10.13.0.0/24;
+              allow 10.13.9.0/24;
+              allow 192.168.1.0/30;
+              deny  all;
+            '';
+          };
+        };
+      };
     };
   };
 }

modules/server/README.md

@@ -5,5 +5,6 @@
 - `kalif` : Factorio (`factorio.lyes.eu`)
 - `link` : Kanidm (`auth.lyes.eu`)
 - `maistro` : Incus
+- `mikau` : Jellyfin (`media.lyes.eu`)
 - `nayru` : Komga/Manga (`manga.lyes.eu`)
 - `taf` : Mail (`taf.lyes.eu`/`mail.lyes.eu`)

modules/server/mikau/default.nix

@@ -0,0 +1,25 @@
+{ pkgs, ... }:
+
+{
+  hardware.graphics = {
+    enable = true;
+    extraPackages = with pkgs; [
+      intel-compute-runtime
+      intel-media-driver
+      intel-vaapi-driver
+      libva-vdpau-driver
+      libvdpau-va-gl
+    ];
+  };
+
+
+  services.jellyfin = {
+    enable = true;
+    user = "jellyfin";
+    group = "media";
+  };
+
+  users.users.jellyfin.extraGroups = [ "media" ];
+
+  networking.firewall.allowedUDPPorts = [ 7359 ];
+}