service/jellyfin: init

hosts/caramel/default.nix

@@ -34,6 +34,7 @@
 #       nginx
 #       postgres
 #       synapse
+      jellyfin
       tmptsync
       unbound
       vaultwarden

modules/default.nix

@@ -15,6 +15,7 @@ let
   );
 in {
   services = mkAttrsFromPaths [
+    ./services/jellyfin.nix
     ./services/nginx.nix
     ./services/postgres.nix
     ./services/synapse.nix

modules/services/jellyfin.nix

@@ -0,0 +1,14 @@
+{ ... }:
+let
+  dir = "/persist/jellyfin";
+in
+{
+  systemd.tmpfiles.rules = [
+    "d ${dir} 700 jellyfin jellyfin"
+    "L /var/lib/jellyfin - - - - ${dir}"
+  ];
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+  };
+}