nixfiles-emily/config/services/jellyfin.nix

{ lib, ... }: {

  users.groups.crime = {};

  services.jellyfin = {
    enable = true;
    group = "crime";
  };

  systemd.services.jellyfin.serviceConfig.UMask = lib.mkForce "0002";

  kyouma.nginx.virtualHosts = {
    "watch.kyouma.net".redirectTo = "fentanyl.trade";
    "fentanyl.trade" = {
      serverAliases = lib.singleton "frotti.ng";
      locations = {
        "= /".return = "302 https://$host/web/";
        "/" = {
          proxyPass = "http://[::1]:8096";
          recommendedProxySettings = true;
          extraConfig = ''
            proxy_buffering on;
          '';
        };
        "= /web/" = {
          proxyPass = "http://[::1]:8096";
          recommendedProxySettings = true;
        };
        "/socket" = {
          proxyPass = "http://[::1]:8096";
          recommendedProxySettings = true;
          proxyWebsockets = true;
        };
      };
    };
  };
  security.acme.certs."fentanyl.trade".extraDomainNames = [ 
    "frotti.ng"
    "watch.kyouma.net"
  ];
}