jellyfin instead of plex

nix/deployments/nixops.nix

@@ -47,7 +47,9 @@ in
       };
     };
 
-  nas = {
+  nas =
+    { pkgs, ... }:
+    {
       deployment.targetHost = nasIp;
       imports = [ ../system/svalbard/configuration.nix ];
       networking.wireless.networks.N904.pskRaw = (
@@ -61,5 +63,10 @@ in
       '';
 
       networking.firewall.allowedTCPPorts = [ 2049 ];
+
+      environment.systemPackages = with pkgs; [
+        flood
+        rtorrent
+      ];
     };
 }

nix/home/programs/jellyfin/default.nix

@@ -0,0 +1,34 @@
+{
+  networking.firewall = {
+    allowedTCPPorts = [
+      # jellyfin frontend
+      8096
+      8920
+      #nginx
+      80
+    ];
+    allowedUDPPorts = [
+      # jellyfin discovery
+      1900
+      7359
+    ];
+  };
+
+  services.jellyfin.enable = true;
+
+  services.nginx = {
+    enable = true;
+    recommendedGzipSettings = true;
+    recommendedOptimisation = true;
+    recommendedProxySettings = true;
+    recommendedTlsSettings = true;
+
+    virtualHosts."mediaserver" = {
+      # http2 can more performant for streaming: https://blog.cloudflare.com/introducing-http2/
+      http2 = true;
+      locations."/" = {
+        proxyPass = "http://localhost:8096";
+      };
+    };
+  };
+}

nix/system/xps11/configuration.nix

@@ -2,7 +2,7 @@
 # your system.  Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
-{ config, pkgs, ... }:
+{ config, pkgs, lib, ... }:
 
 {
   imports =
@@ -11,7 +11,7 @@
       ./hardware-configuration.nix
       ./glibc-locale-paths.nix
       ../common/users.nix
-      ../../home/programs/plex
+      ../../home/programs/jellyfin
     ];
 
   # Use the systemd-boot EFI boot loader.
@@ -79,6 +79,23 @@
 
   services.xserver.layout = "us";
 
+  nixpkgs.config.packageOverrides = pkgs: {
+    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
+  };
+  hardware.opengl = {
+    enable = true;
+    extraPackages = with pkgs; [
+      intel-media-driver
+      vaapiIntel
+      vaapiVdpau
+      libvdpau-va-gl
+      intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
+    ];
+  };
+
+  # 2. override default hardening measure from NixOS - this is default since 22.05
+  systemd.services.jellyfin.serviceConfig.PrivateDevices = lib.mkForce false;
+
   # Enable touchpad support.
   # services.xserver.libinput.enable = true;