From ef34f3f8ec9d655a0335074c618345576005e243 Mon Sep 17 00:00:00 2001
From: Neale Pickett <neale@woozle.org>
Date: Wed, 22 Dec 2021 18:45:26 -0700
Subject: [PATCH] Remove old secret, add optional jellyfin

---
 homelab/docker-compose.jellyfin.yaml | 47 ++++++++++++++++++++++++++++
 homelab/docker-compose.yaml          |  8 ++---
 2 files changed, 49 insertions(+), 6 deletions(-)
 create mode 100644 homelab/docker-compose.jellyfin.yaml

diff --git a/homelab/docker-compose.jellyfin.yaml b/homelab/docker-compose.jellyfin.yaml
new file mode 100644
index 0000000..0f2bea3
--- /dev/null
+++ b/homelab/docker-compose.jellyfin.yaml
@@ -0,0 +1,47 @@
+version: "3.8"
+services:
+  jellyfin:
+    image: ghcr.io/linuxserver/jellyfin:10.7.7
+    ports:
+      - target: 8096
+        published: 8096
+      - target: 7359
+        published: 7359
+        protocol: udp
+      - target: 1900
+        published: 1900
+        protocol: udp
+    environment:
+      TZ: US/Mountain
+    volumes:
+      - type: bind
+        source: /mnt/ext/srv/jellyfin
+        target: /config
+      - type: bind
+        source: /media
+        target: /media
+        read_only: true
+        bind:
+          propagation: rslave
+      - type: bind
+        source: /dev/video10
+        target: /dev/video10
+      - type: bind
+        source: /dev/video11
+        target: /dev/video11
+      - type: bind
+        source: /dev/video12
+        target: /dev/video12
+      - type: bind
+        source: /dev/video13
+        target: /dev/video13
+      - type: bind
+        source: /dev/video14
+        target: /dev/video14
+      - type: bind
+        source: /dev/video15
+        target: /dev/video15
+      - type: bind
+        source: /dev/video16
+        target: /dev/video16
+
diff --git a/homelab/docker-compose.yaml b/homelab/docker-compose.yaml
index 4054bd4..5f4d247 100644
--- a/homelab/docker-compose.yaml
+++ b/homelab/docker-compose.yaml
@@ -31,8 +31,6 @@ services:
       - type: bind
         source: /mnt/ext/srv/traefik/acme.json
         target: /acme.json
-    secrets:
-      - htaccess
     deploy:
       labels:
         traefik.enable: "true"
@@ -43,7 +41,6 @@ services:
         traefik.http.routers.dashboard.tls.certresolver: letsencrypt
         traefik.http.routers.dashboard.middlewares: forward-auth
         traefik.http.routers.dashboard.service: api@internal
-        traefik.http.middlewares.basic-auth.basicauth.usersfile: /run/secrets/htaccess
         traefik.http.middlewares.forward-auth.forwardauth.address: http://simpleauth:8080/
         traefik.http.services.traefik.loadbalancer.server.port: "1"
   simpleauth:
@@ -68,8 +65,10 @@ services:
       - type: bind
         source: /media
         target: /media
+        read_only: true
         bind:
           propagation: rslave
+
   transmission:
     image: ghcr.io/linuxserver/transmission
     networks:
@@ -124,9 +123,6 @@ services:
         target: /var/lib/redis
 
 secrets:
-  htaccess:
-    file: htaccess
-    name: htaccess-v3
   password:
     file: password
     name: password-v1