{ config, pkgs, lib, ... }: { users.groups.media.members = [ "jellyfin" ]; # have media directory owned by media group services.jellyfin = { enable = true; group = "media"; openFirewall = true; }; }