services:
  jellyfin:
    image: jellyfin/jellyfin:2026050514
    user: 1000:1000
    ports:
      - 8096:8096/tcp
      - 7359:7359/udp
    group_add:
      - '105' # Change this to match your "render" host group id and remove this comment
#    network_mode: 'host'
    volumes:
      - /var/data/jellyfin/data/config:/config
      - /var/data/jellyfin/data/cache:/cache
      - /var/mnt/usb/Serien:/media/series
      - /var/mnt/usb/Filme:/media/movies
    devices:
      - /dev/dri/renderD128:/dev/dri/renderD128
    restart: 'unless-stopped'
    labels:  
      - "traefik.enable=true"
      - "traefik.http.routers.jellyfin.rule=Host(`jellyfin.gandalf.dfas4.de`)"
      - "traefik.http.routers.jellyfin.entrypoints=websecure"
      - "traefik.http.routers.jellyfin.tls=true"
      - "traefik.http.routers.jellyfin.tls.certresolver=myresolver"
      - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"
      - "traefik.http.routers.jellyfin.tls.domains[0].main=gandalf.dfas4.de"
      - "traefik.http.routers.jellyfin.tls.domains[0].sans=*.gandalf.dfas4.de"
      # Essential Headers for Chromecast
      - "traefik.http.middlewares.jellyfin-cors.headers.accesscontrolalloworiginlist=*"
      - "traefik.http.middlewares.jellyfin-cors.headers.accesscontrolallowmethods=GET,POST,OPTIONS"
      - "traefik.http.middlewares.jellyfin-cors.headers.accesscontrolallowheaders=*"
      - "traefik.http.middlewares.jellyfin-headers.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.middlewares.jellyfin-headers.headers.customrequestheaders.X-Forwarded-Host=jellyfin.gandalf.dfas4.de"
      - "traefik.http.routers.jellyfin.middlewares=jellyfin-cors,jellyfin-headers"
    networks:
      - proxy

networks:
  proxy:
    name: proxy