From 76e95d80a252dec8b6b02a87764392909ed5b895 Mon Sep 17 00:00:00 2001
From: Ethan Turkeltaub <ethan@turkeltaub.dev>
Date: Sat, 27 Dec 2025 23:00:02 -0500
Subject: [PATCH] Add Jellyfin

---
 Justfile                                             |  3 +++
 hosts/bastion/profiles/caddy/default.nix             | 12 ++++++++++++
 hosts/htpc/configuration.nix                         |  1 +
 modules/profiles/media-management/jellyfin.nix       |  6 ++++++
 .../profiles/media-management/tracearr/default.nix   |  1 +
 5 files changed, 23 insertions(+)
 create mode 100644 modules/profiles/media-management/jellyfin.nix

diff --git a/Justfile b/Justfile
index 0df2cee..6e1925e 100644
--- a/Justfile
+++ b/Justfile
@@ -45,6 +45,9 @@ ansible playbook:
 ssh host:
     ssh -F $SSH_CONFIG_FILE root@{{ host }}
 
+mosh host:
+    mosh --ssh="ssh -F $SSH_CONFIG_FILE" root@{{ host }}
+
 scp *args:
     scp -F $SSH_CONFIG_FILE {{ args }}
 
diff --git a/hosts/bastion/profiles/caddy/default.nix b/hosts/bastion/profiles/caddy/default.nix
index 061e1a4..7bd1acd 100644
--- a/hosts/bastion/profiles/caddy/default.nix
+++ b/hosts/bastion/profiles/caddy/default.nix
@@ -267,6 +267,18 @@
         inherit (hosts.controller.config.services.termix) port;
       };
 
+      "jellyfin.e10.video" = {
+        host = hosts.htpc;
+        port = 8096;
+        extraConfig = ''
+          encode gzip zstd
+
+          request_body {
+            max_size 100MiB
+          }
+        '';
+      };
+
       "e10.video" = {
         host = hosts.htpc;
         inherit (hosts.htpc.config.services.plex) port;
diff --git a/hosts/htpc/configuration.nix b/hosts/htpc/configuration.nix
index b19f347..9705c78 100644
--- a/hosts/htpc/configuration.nix
+++ b/hosts/htpc/configuration.nix
@@ -7,6 +7,7 @@
       profiles.media-management.declutarr.default
       profiles.media-management.fileflows.server
       profiles.media-management.huntarr
+      profiles.media-management.jellyfin
       profiles.media-management.jellyseerr
       profiles.media-management.plex
       profiles.media-management.profilarr
diff --git a/modules/profiles/media-management/jellyfin.nix b/modules/profiles/media-management/jellyfin.nix
new file mode 100644
index 0000000..8379831
--- /dev/null
+++ b/modules/profiles/media-management/jellyfin.nix
@@ -0,0 +1,6 @@
+{
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}
diff --git a/modules/profiles/media-management/tracearr/default.nix b/modules/profiles/media-management/tracearr/default.nix
index c92d781..e8ea9f4 100644
--- a/modules/profiles/media-management/tracearr/default.nix
+++ b/modules/profiles/media-management/tracearr/default.nix
@@ -35,6 +35,7 @@
     environment = {
       DATABASE_URL = "postgres://tracearr:tracearr@localhost:5432/tracearr";
       REDIS_URL = "redis://localhost:6381";
+      TRUST_PROXY = toString true;
     };
     environmentFile = config.sops.templates.tracearr_environment_file.path;
   };