Enable jellyfin on sisko

hosts/sisko/default.nix

@@ -31,6 +31,7 @@
       "paperless"
       "syncthing"
       "atticd"
+      "jellyfin"
     ]
     ++ [
       ./disko.nix

modules/cloudflare-dyndns/default.nix

@@ -14,8 +14,7 @@
       "vpn.aciceri.dev"
       "photos.aciceri.dev"
       "status.aciceri.dev"
-      "paper.aciceri.dev"
-      "cloud.aciceri.dev"
+      "jelly.aciceri.dev"
     ];
     apiTokenFile = config.age.secrets.cloudflare-dyndns-api-token.path;
   };

modules/jellyfin/default.nix

@@ -1,7 +1,21 @@
+{ config, ... }:
 {
   services.jellyfin = {
     enable = true;
+    openFirewall = true;
   };
 
   users.users.jellyfin.extraGroups = [ "transmission" ];
+
+  environment.persistence."/persist".directories = [
+    config.services.jellyfin.dataDir
+  ];
+
+  services.nginx.virtualHosts = {
+    "jelly.aciceri.dev" = {
+      enableACME = true;
+      forceSSL = true;
+      locations."/".proxyPass = "http://127.0.0.1:8096";
+    };
+  };
 }