bertof/nix-dotfiles
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

heimdall: Jellyfin S3 support

Browse source
This commit is contained in:
Filippo Berto 2026-02-22 14:40:06 +01:00
parent 9cc36254cc
commit 98e2905a70
No known key found for this signature in database
GPG key ID: F1D17F9BCEC62FBC
4 changed files with 58 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
flake.nix
View file

@ -506,6 +506,7 @@
./nixos/forgejo.nix # Git hosting (Forgejo/Gitea fork) ./nixos/forgejo.nix # Git hosting (Forgejo/Gitea fork)
./nixos/garage.nix # Object storage service ./nixos/garage.nix # Object storage service
./nixos/ollama.nix # AI/LLM service ./nixos/ollama.nix # AI/LLM service
./nixos/jellyfin.nix # Jellyfin media server
# Cloud storage and secrets # Cloud storage and secrets
self.nixosModules.bertof-rclone self.nixosModules.bertof-rclone

33
nixos/jellyfin.nix Normal file
View file

@ -0,0 +1,33 @@
{ pkgs, config, ... }: {
age.secrets.rclone_jellyfin = {
file = ../secrets/rclone_jellyfin.age;
owner = "jellyfin";
};
services.jellyfin = {
enable = true;
openFirewall = true;
group = "users";
};
environment.systemPackages = [ pkgs.rclone ];
fileSystems."/var/lib/jellyfin/media" = {
device = "garage:/";
fsType = "rclone";
options = [
"nodev"
"nofail"
"_netdev"
"allow_other"
"uid=jellyfin"
"gid=users"
"X-mount.mkdir"
"args2env"
"vfs_cache_mode=writes"
"s3_upload_concurrency=32"
"s3_chunk_size=128000"
"config=${config.age.secrets.rclone_jellyfin.path}"
];
};
}

23
secrets/rclone_jellyfin.age Normal file
View file

@ -0,0 +1,23 @@
-----BEGIN AGE ENCRYPTED FILE-----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-----END AGE ENCRYPTED FILE-----

1
secrets/secrets.nix
View file

@ -46,6 +46,7 @@ in
"thor_wg_priv.age".publicKeys = devUsers ++ [ thor ]; "thor_wg_priv.age".publicKeys = devUsers ++ [ thor ];
"wg_psk.age".publicKeys = devUsers ++ systems; "wg_psk.age".publicKeys = devUsers ++ systems;
"rclone_bertof.age".publicKeys = devUsers ++ [ baldur heimdall odin sif thor ]; "rclone_bertof.age".publicKeys = devUsers ++ [ baldur heimdall odin sif thor ];
"rclone_jellyfin.age".publicKeys = devUsers ++ [ baldur heimdall ];
"rclone_tiziano.age".publicKeys = devUsers ++ [ odin ]; "rclone_tiziano.age".publicKeys = devUsers ++ [ odin ];
"ollama.age".publicKeys = devUsers ++ [ thor ]; "ollama.age".publicKeys = devUsers ++ [ thor ];
"heimdall-gitlab-runner-nix.age".publicKeys = devUsers ++ [ heimdall ]; "heimdall-gitlab-runner-nix.age".publicKeys = devUsers ++ [ heimdall ];