105 lines
3.3 KiB
Nix
105 lines
3.3 KiB
Nix
{
|
|
pkgs,
|
|
config,
|
|
lib,
|
|
...
|
|
}:
|
|
let
|
|
cfg = config.aux.system.services.jellyfin;
|
|
|
|
jellyfin-audio-save = pkgs.jellyfin.overrideAttrs (
|
|
finalAttrs: prevAttrs: { patches = [ ./jellyfin/jellyfin-audio-save-position.patch ]; }
|
|
);
|
|
in
|
|
{
|
|
options = {
|
|
aux.system.services.jellyfin = {
|
|
autostart = lib.mkEnableOption (lib.mdDoc "Automatically starts Jellyfin at boot.");
|
|
enable = lib.mkEnableOption (lib.mdDoc "Enables the Jellyfin media streaming service.");
|
|
home = lib.mkOption {
|
|
default = "";
|
|
type = lib.types.str;
|
|
description = "Where to store Jellyfin's files";
|
|
};
|
|
domain = lib.mkOption {
|
|
default = "";
|
|
type = lib.types.str;
|
|
description = "The root domain that Jellyfin will be hosted on.";
|
|
example = "example.com";
|
|
};
|
|
url = lib.mkOption {
|
|
default = "";
|
|
type = lib.types.str;
|
|
description = "The complete URL where Jellyfin is hosted.";
|
|
example = "https://jellyfin.example.com";
|
|
};
|
|
};
|
|
};
|
|
|
|
config = lib.mkIf cfg.enable {
|
|
aux.system.users.media.enable = true;
|
|
|
|
services = {
|
|
nginx.virtualHosts."${cfg.url}" = {
|
|
useACMEHost = cfg.domain;
|
|
forceSSL = true;
|
|
locations."/" = {
|
|
proxyPass = "http://127.0.0.1:8096";
|
|
proxyWebsockets = true;
|
|
extraConfig = ''
|
|
# Taken from https://jellyfin.org/docs/general/networking/nginx/
|
|
client_max_body_size 20M;
|
|
|
|
# Security / XSS Mitigation Headers
|
|
# NOTE: X-Frame-Options may cause issues with the webOS app
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
add_header X-Content-Type-Options "nosniff";
|
|
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Protocol $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
|
|
# Disable buffering when the nginx proxy gets very resource heavy upon streaming
|
|
proxy_buffering off;
|
|
'';
|
|
};
|
|
locations."/socket" = {
|
|
proxyPass = "http://127.0.0.1:8096";
|
|
proxyWebsockets = true;
|
|
extraConfig = ''
|
|
# Proxy Jellyfin Websockets traffic
|
|
proxy_set_header Upgrade $http_upgrade;
|
|
proxy_set_header Connection "upgrade";
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_set_header X-Forwarded-Protocol $scheme;
|
|
proxy_set_header X-Forwarded-Host $host;
|
|
'';
|
|
};
|
|
};
|
|
|
|
jellyfin = {
|
|
enable = true;
|
|
dataDir = lib.mkIf (cfg.home != "") cfg.home;
|
|
group = "media";
|
|
package = jellyfin-audio-save;
|
|
};
|
|
};
|
|
|
|
# Install packages for plugins
|
|
environment.systemPackages = with pkgs; [
|
|
id3v2
|
|
yt-dlp
|
|
];
|
|
|
|
systemd.services.nginx.wants = [ config.systemd.services.jellyfin.name ];
|
|
# Disable autostart if configured
|
|
systemd.services.jellyfin = lib.mkIf (!cfg.autostart) { wantedBy = lib.mkForce [ ]; };
|
|
};
|
|
}
|