{ ... }:
let
  directories = [
    "/opt/jellyfin"
  ];
in
{
  systemd.tmpfiles.rules = map (x: "d ${x} 0755 share share - -") directories;
  virtualisation.oci-containers.containers.jellyfin = {
    image = "jellyfin/jellyfin:latest";
    autoStart = true;
    user = "994:994";
    ports = [
      "8096:8096/tcp"
    ];
    volumes = [
      "/opt/jellyfin/config:/config"
      "/opt/jellyfin/cache:/cache"
      "/lagoon/media:/media"
    ];
  };

  services.caddy.virtualHosts."jellyfin.tdback.net".extraConfig = ''
    encode zstd gzip
    reverse_proxy http://localhost:8096
  '';
}