38 lines
884 B
Nix
38 lines
884 B
Nix
{
|
|
config,
|
|
lib,
|
|
pkgs,
|
|
...
|
|
}:
|
|
{
|
|
services.jellyfin = {
|
|
enable = true;
|
|
openFirewall = true;
|
|
group = "media";
|
|
user = "media";
|
|
};
|
|
|
|
healthchecks.http.jellyfin = {
|
|
url = "flix.${config.networking.hostName}.private";
|
|
};
|
|
|
|
services.nginx = {
|
|
enable = true;
|
|
virtualHosts."flix.${config.networking.hostName}.private" = {
|
|
serverAliases = [ "flix.${config.networking.hostName}" ];
|
|
extraConfig = ''
|
|
# Security / XSS Mitigation Headers
|
|
# NOTE: X-Frame-Options may cause issues with the webOS app
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
|
add_header X-XSS-Protection "1; mode=block";
|
|
add_header X-Content-Type-Options "nosniff";
|
|
'';
|
|
locations."/" = {
|
|
recommendedProxySettings = true;
|
|
proxyWebsockets = true;
|
|
proxyPass = "http://localhost:8096";
|
|
};
|
|
};
|
|
};
|
|
|
|
}
|