# Generated by mcp/build_host_files.py from inventory.yaml.
# Do NOT edit by hand — your changes will be overwritten.
# Source of truth: ../inventory.yaml
name: jellyfin
kind: lxc
os: linux
role: media-server
state: active
host: strong
pve_id: 101
lan_ip: 192.168.8.246
mesh:
  tailscale:
    fqdn: jellyfin
mesh_globals:
  primary: netbird
  accepted:
  - netbird
  - tailscale
mounts:
- /mnt/media_local
public_host: media.hubris.network
runs:
- jellyfin
services_hosted:
- name: jellyfin
  url: https://media.hubris.network
  backend: jellyfin
  doc_page: knowledge/wiki/containers/101-jellyfin.md
  risk_notes: native Authentik OIDC via SSO-Auth plugin, no Caddy forward-auth gate; VAAPI transcode depends
    on GPU passthrough on strong
notes:
- Jellyfin 10.11.11 with VAAPI hardware acceleration (Radeon 680M iGPU on strong)
- 4 cores / 8 GiB RAM / 1 GiB swap
- SSO-Auth plugin v4.0.0.4 with Authentik OIDC (no Caddy forward-auth gate)
- GPU passed via dev0+dev1: /dev/dri/renderD128 + card0
- Migrated from hubris to strong 2026-07-05 (Phase 2). Library on ludo-lvm.
mcp_endpoint: https://mcp.hubris.network/mcp
secrets_issuance_endpoint: https://secrets.hubris.network/issue