49 current 2025-10-07 20:40:25 25.05.20251001.5b5be50 6.12.49 *

modules/homelab/services/jellyfin/default.nix

@@ -54,7 +54,18 @@ in
     # open firewall
 #    networking.firewall.allowedTCPPorts = [ cfg.port ];
 
-    # reverse proxy entryo
+    # internal reverse proxy entry
+    services.nginx.virtualHosts."jellyfin.snowbelle.lan" = {
+      enableACME = false;
+      forceSSL = false;
+      sslCertificate = config.sops.secrets."ssl_blakedheld_crt".path;
+      sslCertificateKey = config.sops.secrets."ssl_blakedheld_key".path;
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString cfg.port}";
+      };
+    };
+
+    # external reverse proxy entry
     services.nginx.virtualHosts."media.blakedheld.xyz" = {
       enableACME = false;
       forceSSL = true;