jellyfin: fix hardware acceleration, remove uncompatible additional restrictionsmaster

1 files changed, 1 insertions, 15 deletions

diff --git a/usecases/server/jellyfin.nix b/usecases/server/jellyfin.nix
index 7119d38..2875668 100644
--- a/usecases/server/jellyfin.nix
+++ b/usecases/server/jellyfin.nix
@@ -32,7 +32,7 @@ inputs:
       # TODO: remove when #108224 is merged
 
       # Allows access to drm devices for transcoding with hardware acceleration
-      SupplementaryGroups = [ "video" ];
+      SupplementaryGroups = [ "video" "render" ];
       # char-drm Allows ffmpeg to transcode with hardware acceleration
       DeviceAllow = lib.mkForce [ "char-drm rw" ];
 
@@ -43,20 +43,6 @@ inputs:
       # Personal:
       ProtectHome = true;
       ProtectSystem = "strict";
-
-      BindReadOnlyPaths = [
-        "/nix/store"
-
-        "/etc/ssl/certs"
-        "/etc/static/ssl/certs"
-
-        "/etc/resolv.conf"
-      ] ++ lib.optional config.hardware.opengl.enable [
-        "/run/opengl-driver"
-      ] ++ config.services.jellyfin.allowedPaths;
-
-      RuntimeDirectory = "jellyfin";
-      RootDirectory = "/run/jellyfin";
     };
   };
 }