home.nas: allow TV to access jellyfin without https

for some reason, connecting to the hostname fails, and connecting to the
ip using https leads to certificate errors

bundles/jellyfin/metadata.py

@@ -55,3 +55,15 @@ def nginx(metadata):
             },
         },
     }
+
+@metadata_reactor.provides(
+    'firewall/port_rules',
+)
+def firewall(metadata):
+    return {
+        'firewall': {
+            'port_rules': {
+                '8096/tcp': atomic(metadata.get('jellyfin/restrict-to', {'*'})),
+            },
+        },
+    }

nodes/home/nas.py

@@ -95,6 +95,11 @@ nodes['home.nas'] = {
                 },
             },
         },
+        'jellyfin': {
+            'restrict-to': {
+                'home.lgtv-wohnzimmer',
+            },
+        },
         'mosquitto': {
             'bridges': {
                 'c3voc': {