install jellyfin onto home.nas

bundles/jellyfin/files/jellyfin-sudoers

@@ -0,0 +1,7 @@
+Cmnd_Alias RESTARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl restart jellyfin
+Cmnd_Alias STARTSERVER_SYSTEMD = /usr/bin/systemd-run systemctl start jellyfin
+Cmnd_Alias STOPSERVER_SYSTEMD = /usr/bin/systemd-run systemctl stop jellyfin
+
+jellyfin ALL=(ALL) NOPASSWD: RESTARTSERVER_SYSTEMD
+jellyfin ALL=(ALL) NOPASSWD: STARTSERVER_SYSTEMD
+jellyfin ALL=(ALL) NOPASSWD: STOPSERVER_SYSTEMD

bundles/jellyfin/items.py

@@ -0,0 +1,5 @@
+files['/etc/sudoers.d/jellyfin-sudoers'] = {
+    'after': {
+        'pkg_apt:jellyfin',
+    },
+}

bundles/jellyfin/metadata.py

@@ -0,0 +1,38 @@
+from bundlewrap.metadata import atomic
+
+defaults = {
+    'apt': {
+        'packages': {
+            'jellyfin': {},
+        },
+        'repos': {
+            'jellyfin': {
+                'uris': {
+                    'https://repo.jellyfin.org/{os}'
+                },
+            },
+        },
+    },
+    'icinga2_api': {
+        'transmission': {
+            'services': {
+                'JELLYFIN PROCESS': {
+                    'command_on_monitored_host': '/usr/lib/nagios/plugins/check_procs -C jellyfin -c 1:',
+                },
+            },
+        },
+    },
+}
+
+
+@metadata_reactor.provides(
+    'firewall/port_rules',
+)
+def firewall(metadata):
+    return {
+        'firewall': {
+            'port_rules': {
+                '8096': atomic(metadata.get('jellyfin/restrict-to', {'*'})),
+            },
+        },
+    }