From e9699357e671299d6bfdcec939e543906dbfb708 Mon Sep 17 00:00:00 2001
From: Felix Tenley <dev@felschr.com>
Date: Thu, 27 May 2021 11:24:03 +0200
Subject: [PATCH] feat: expose jellyfin via nginx

---
 services/jellyfin.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/services/jellyfin.nix b/services/jellyfin.nix
index 1432e3d..738ac41 100644
--- a/services/jellyfin.nix
+++ b/services/jellyfin.nix
@@ -3,8 +3,16 @@
 {
   services.jellyfin.enable = true;
   services.jellyfin.user = "felschr";
-  networking.firewall.allowedTCPPorts = [ 8920 8096 1900 7359 ];
+  services.jellyfin.openFirewall = true;
 
   # for hardware acceleration
-  users.users.jellyfin.extraGroups = [ "video" ];
+  users.users.jellyfin.extraGroups = [ "video" "render" ];
+
+  services.nginx = {
+    virtualHosts."jellyfin.felschr.com" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/".proxyPass = "http://localhost:8096";
+    };
+  };
 }