From 90bcf7f981dfe4fb36c4cd594b3275fb96a041db Mon Sep 17 00:00:00 2001
From: Minijackson <minijackson@riseup.net>
Date: Thu, 9 Jun 2022 09:53:20 +0200
Subject: jellyfin: fix hardware acceleration, remove uncompatible additional
 restrictions

---
 usecases/server/jellyfin.nix | 16 +---------------
 1 file changed, 1 insertion(+), 15 deletions(-)

diff --git a/usecases/server/jellyfin.nix b/usecases/server/jellyfin.nix
index 7119d38..2875668 100644
--- a/usecases/server/jellyfin.nix
+++ b/usecases/server/jellyfin.nix
@@ -32,7 +32,7 @@ inputs:
       # TODO: remove when #108224 is merged
 
       # Allows access to drm devices for transcoding with hardware acceleration
-      SupplementaryGroups = [ "video" ];
+      SupplementaryGroups = [ "video" "render" ];
       # char-drm Allows ffmpeg to transcode with hardware acceleration
       DeviceAllow = lib.mkForce [ "char-drm rw" ];
 
@@ -43,20 +43,6 @@ inputs:
       # Personal:
       ProtectHome = true;
       ProtectSystem = "strict";
-
-      BindReadOnlyPaths = [
-        "/nix/store"
-
-        "/etc/ssl/certs"
-        "/etc/static/ssl/certs"
-
-        "/etc/resolv.conf"
-      ] ++ lib.optional config.hardware.opengl.enable [
-        "/run/opengl-driver"
-      ] ++ config.services.jellyfin.allowedPaths;
-
-      RuntimeDirectory = "jellyfin";
-      RootDirectory = "/run/jellyfin";
     };
   };
 }
-- 
cgit v1.2.3