{ pkgs, config, ... }: {
  age.secrets.rclone_jellyfin = {
    file = ../secrets/rclone_jellyfin.age;
    owner = "jellyfin";
  };

  services.jellyfin = {
    enable = true;
    openFirewall = true;
    group = "users";
  };

  environment.systemPackages = [ pkgs.rclone ];

  fileSystems."/var/lib/jellyfin/media" = {
    device = "garage:/";
    fsType = "rclone";
    options = [
      "nodev"
      "nofail"
      "_netdev"
      "allow_other"
      "uid=jellyfin"
      "gid=users"
      "X-mount.mkdir"
      "args2env"
      "vfs_cache_mode=writes"
      "s3_upload_concurrency=32"
      "s3_chunk_size=128000"
      "config=${config.age.secrets.rclone_jellyfin.path}"
    ];
  };
}