Remove old secret, add optional jellyfin

homelab/docker-compose.jellyfin.yaml

@@ -0,0 +1,47 @@
+version: "3.8"
+services:
+  jellyfin:
+    image: ghcr.io/linuxserver/jellyfin:10.7.7
+    ports:
+      - target: 8096
+        published: 8096
+      - target: 7359
+        published: 7359
+        protocol: udp
+      - target: 1900
+        published: 1900
+        protocol: udp
+    environment:
+      TZ: US/Mountain
+    volumes:
+      - type: bind
+        source: /mnt/ext/srv/jellyfin
+        target: /config
+      - type: bind
+        source: /media
+        target: /media
+        read_only: true
+        bind:
+          propagation: rslave
+      - type: bind
+        source: /dev/video10
+        target: /dev/video10
+      - type: bind
+        source: /dev/video11
+        target: /dev/video11
+      - type: bind
+        source: /dev/video12
+        target: /dev/video12
+      - type: bind
+        source: /dev/video13
+        target: /dev/video13
+      - type: bind
+        source: /dev/video14
+        target: /dev/video14
+      - type: bind
+        source: /dev/video15
+        target: /dev/video15
+      - type: bind
+        source: /dev/video16
+        target: /dev/video16
+

homelab/docker-compose.yaml

@@ -31,8 +31,6 @@ services:
       - type: bind
         source: /mnt/ext/srv/traefik/acme.json
         target: /acme.json
-    secrets:
-      - htaccess
     deploy:
       labels:
         traefik.enable: "true"
@@ -43,7 +41,6 @@ services:
         traefik.http.routers.dashboard.tls.certresolver: letsencrypt
         traefik.http.routers.dashboard.middlewares: forward-auth
         traefik.http.routers.dashboard.service: api@internal
-        traefik.http.middlewares.basic-auth.basicauth.usersfile: /run/secrets/htaccess
         traefik.http.middlewares.forward-auth.forwardauth.address: http://simpleauth:8080/
         traefik.http.services.traefik.loadbalancer.server.port: "1"
   simpleauth:
@@ -68,8 +65,10 @@ services:
       - type: bind
         source: /media
         target: /media
+        read_only: true
         bind:
           propagation: rslave
+
   transmission:
     image: ghcr.io/linuxserver/transmission
     networks:
@@ -124,9 +123,6 @@ services:
         target: /var/lib/redis
 
 secrets:
-  htaccess:
-    file: htaccess
-    name: htaccess-v3
   password:
     file: password
     name: password-v1