blake/nix
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

40 current 2025-10-06 14:01:16 25.05.20251001.5b5be50 6.12.49 *

Browse Source
This commit is contained in:
blake
2025-10-06 14:15:51 -05:00
parent c0fe493468
commit 44835429d2
3 changed files with 13 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
hosts/snowbelle/configuration.nix
View File

@@ -81,7 +81,6 @@
# Open ports in the firewall. # Open ports in the firewall.
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
22 # ssh
80 # http 80 # http
111 # portmapper for nfs 111 # portmapper for nfs
139 # smb 139 # smb

14
modules/homelab/services/jellyfin/default.nix
View File

@@ -19,6 +19,7 @@ in
# declare jellyfin group # declare jellyfin group
users.groups.jellyfin = { gid = 701; }; users.groups.jellyfin = { gid = 701; };
# declare jellyfin user # declare jellyfin user
users.users.jellyfin = { users.users.jellyfin = {
description = "jellyfin media server user"; description = "jellyfin media server user";
@@ -30,6 +31,7 @@ in
extraGroups = [ "media" "video" "render" ]; extraGroups = [ "media" "video" "render" ];
}; };
# enable the jellyfin service
services.jellyfin = { services.jellyfin = {
enable = true; enable = true;
openFirewall = true; # Opens 8096/8920 automatically openFirewall = true; # Opens 8096/8920 automatically
@@ -37,8 +39,14 @@ in
group = "jellyfin"; # Default: jellyfin group = "jellyfin"; # Default: jellyfin
dataDir = "/var/lib/jellyfin"; # Config + metadata storage dataDir = "/var/lib/jellyfin"; # Config + metadata storage
}; };
systemd.services.jellyfin.serviceConfig = {
UMask = lib.mkForce "0007"; # override umask to make permissions work out
}; systemd.services.jellyfin.serviceConfig = { UMask = lib.mkForce "0007"; };
# open firewall
#networking.firewall.allowedTCPPorts = [ 8096 ];
# reverse proxy entryo
}; };
} }

2
modules/system/ssh.nix
View File

@@ -18,5 +18,7 @@ in
X11Forwarding = false; X11Forwarding = false;
}; };
}; };
# open firewall
networking.firewall.allowedTCPPorts = [ 22 ];
}; };
} }