homelab framework module init (everything is a mess)

modules/nixos/services/jellyfin.nix

@@ -0,0 +1,125 @@
+# modules/services/jellyfin.nix
+{
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+with lib; let
+  cfg = config.services.jellyfin;
+in {
+  options.services.jellyfin = {
+    enable = mkEnableOption "Jellyfin media server";
+
+    port = mkOption {
+      type = types.port;
+      default = 8096;
+      description = "Port for Jellyfin web interface";
+    };
+
+    dataDir = mkOption {
+      type = types.str;
+      default = "/var/lib/jellyfin";
+      description = "Directory to store Jellyfin data";
+    };
+
+    mediaDir = mkOption {
+      type = types.str;
+      default = "/media";
+      description = "Directory containing media files";
+    };
+
+    enableMetrics = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Enable Prometheus metrics";
+    };
+
+    exposeWeb = mkOption {
+      type = types.bool;
+      default = true;
+      description = "Expose web interface through reverse proxy";
+    };
+  };
+
+  config = mkIf cfg.enable {
+    # Enable the service
+    services.jellyfin = {
+      enable = true;
+      dataDir = cfg.dataDir;
+    };
+
+    # Configure global settings
+    homelab.global = {
+      # Add backup job for Jellyfin data
+      backups.jobs = [
+        {
+          name = "jellyfin-config";
+          backend = "restic";
+          paths = ["${cfg.dataDir}/config" "${cfg.dataDir}/data"];
+          schedule = "0 2 * * *"; # Daily at 2 AM
+          excludePatterns = [
+            "*/cache/*"
+            "*/transcodes/*"
+            "*/logs/*"
+          ];
+          preHook = ''
+            # Stop jellyfin for consistent backup
+            systemctl stop jellyfin
+          '';
+          postHook = ''
+            # Restart jellyfin after backup
+            systemctl start jellyfin
+          '';
+        }
+        {
+          name = "jellyfin-media";
+          backend = "restic";
+          paths = [cfg.mediaDir];
+          schedule = "0 3 * * 0"; # Weekly on Sunday at 3 AM
+          excludePatterns = [
+            "*.tmp"
+            "*/.@__thumb/*" # Synology thumbnails
+          ];
+        }
+      ];
+
+      # Add reverse proxy entry if enabled
+      reverseProxy.entries = mkIf cfg.exposeWeb [
+        {
+          subdomain = "jellyfin";
+          port = cfg.port;
+          enableAuth = false; # Jellyfin has its own auth
+          websockets = true;
+          customHeaders = {
+            "X-Forwarded-Proto" = "$scheme";
+            "X-Forwarded-Host" = "$host";
+          };
+        }
+      ];
+
+      # Add monitoring endpoint if metrics enabled
+      monitoring.endpoints = mkIf cfg.enableMetrics [
+        {
+          name = "jellyfin";
+          port = cfg.port;
+          path = "/metrics"; # Assuming you have a metrics plugin
+          jobName = "jellyfin";
+          scrapeInterval = "60s";
+          labels = {
+            service = "jellyfin";
+            type = "media-server";
+          };
+        }
+      ];
+    };
+
+    # Open firewall
+    networking.firewall.allowedTCPPorts = [cfg.port];
+
+    # Create media directory
+    systemd.tmpfiles.rules = [
+      "d ${cfg.mediaDir} 0755 jellyfin jellyfin -"
+    ];
+  };
+}