Move jellyfin to hardware box

Rather than running Jellyfin on a VM as before, just move the service
over to Hosea, which isn't doing anything graphical

hosts/hosea/default.nix

@@ -2,7 +2,7 @@
 # your system.	Help is available in the configuration.nix(5) man page
 # and in the NixOS manual (accessible by running ‘nixos-help’).
 
-{ top, ... }:
+{ pkgs, top, ... }:
 let
   wanInterface = "enp2s0";
   lanInterface = "enp1s0";
@@ -28,7 +28,43 @@ in
     };
     extraModprobeConfig = "vboxdrv";
   };
-  users.users.greg.extraGroups = [ "vboxusers" ];
+
+  environment.systemPackages = with pkgs; [
+    clinfo
+    glxinfo
+    jellyfin-ffmpeg
+    libva-utils
+    nfs-utils
+    radeontop
+    vulkan-tools
+  ];
+
+  greg = {
+    home = true;
+    proxies = {
+      "jellyfin.home".target = "http://localhost:8096/";
+      "jellyfin.thehellings.lan".target = "http://localhost:8096/";
+    };
+    tailscale.enable = true;
+  };
+
+  hardware = {
+    enableAllFirmware = true;
+    enableRedistributableFirmware = true;
+    graphics = {
+      enable = true;
+    };
+    opengl = {
+      enable = true;
+      extraPackages = with pkgs; [
+        intel-media-driver
+        vaapiIntel
+        vaapiVdpau
+        #intel-media-sdk
+        intel-compute-runtime
+      ];
+    };
+  };
 
   networking = {
     hostName = "hosea";
@@ -48,16 +84,43 @@ in
     };
   };
 
-  # Serves as the router, DHCP, and DNS for the site
-  greg = {
-    tailscale.enable = true;
-    home = true;
-  };
   services = {
+    jellyfin = {
+      enable = true;
+      openFirewall = true;
+    };
     # Configure keymap
     xserver.xkb = {
       layout = "us";
       variant = "";
     };
   };
+
+  systemd.mounts =
+    let
+      nfs = name: {
+        what = "nas1.shire-zebra.ts.net:/mnt/all/${name}";
+        type = "nfs";
+        name = "${name}.mount";
+        where = "/${name}";
+        requires = [ "tailscaled-autoconnect.service" ];
+        after = [ "tailscaled-autoconnect.service" ];
+        wantedBy = [ "multi-user.target" ];
+        mountConfig.Options = "_netdev,noexec,ro,timeo=50,retrans=5,soft";
+      };
+    in
+    [
+      (nfs "music")
+      (nfs "photos")
+      (nfs "video")
+    ];
+
+  users.users = {
+    greg.extraGroups = [ "vboxusers" ];
+
+    jellyfin.extraGroups = [
+      "video"
+      "render"
+    ];
+  };
 }