{
  pkgs,
  config,
  service_configs,
  username,
  lib,
  ...
}:
{
  imports = [
    (lib.serviceMountDeps "jellyfin" [
      config.services.jellyfin.dataDir
      config.services.jellyfin.cacheDir
    ])
    (lib.serviceDependZpool "jellyfin" service_configs.zpool_ssds)
  ];

  services.jellyfin = {
    enable = true;
    # used for local streaming
    openFirewall = true;
    package = pkgs.jellyfin.override { jellyfin-ffmpeg = (lib.optimizePackage pkgs.jellyfin-ffmpeg); };

    inherit (service_configs.jellyfin) dataDir cacheDir;
  };

  services.caddy.virtualHosts."jellyfin.${service_configs.https.domain}".extraConfig = ''
    reverse_proxy :${builtins.toString service_configs.ports.jellyfin}
    request_body {
    	max_size 4096MB
    }
  '';

  systemd.tmpfiles.rules = [
    "d ${config.services.jellyfin.dataDir} 0700 ${config.services.jellyfin.user} ${config.services.jellyfin.group}"
    "d ${config.services.jellyfin.cacheDir} 0700 ${config.services.jellyfin.user} ${config.services.jellyfin.group}"
  ];

  users.users.${config.services.jellyfin.user}.extraGroups = [
    "video"
    "render"
    service_configs.media_group
  ];

  users.users.${username}.extraGroups = [
    config.services.jellyfin.group
  ];
}