# refer navidrome/docker-compose.yml for security options, or just ask doubao. 

services:
  jellyfin:
    image: nyanmisaka/jellyfin:latest
    container_name: jellyfin
    network_mode: "host"
    volumes:
      - jellyfin-config:/config
      - jellyfin-cache:/cache
      - ${MEDIA_PATH:-/media}:/media:ro,nosuid,nodev  # recursive 'rx'
      # - /dev/dri/renderD128:/dev/dri/renderD128
      - type: bind
        source: /usr/share/fonts/opentype
        target: /usr/local/share/fonts/custom
        read_only: true
    devices:
      - /dev/dri/renderD128:/dev/dri/renderD128:rw
      #- /dev/dri/card0:/dev/dri/card0
    restart: 'unless-stopped'
    #environment:
    #  - JELLYFIN_PublishedServerUrl=http://localhost:8096
    extra_hosts:
      - 'host.docker.internal:host-gateway'
volumes:
  jellyfin-cache:
    driver: local
  jellyfin-config:
    driver: local