# jellyfin (service:jellyfin)

- backend: host:jellyfin
- url: https://media.hubris.network
- doc: knowledge/wiki/containers/101-jellyfin.md
- risk notes: native Authentik OIDC via SSO-Auth plugin, no Caddy forward-auth gate; VAAPI transcode depends on GPU passthrough on strong

## Blast radius
- impacts: (none)
- affected by: host:jellyfin

## Safe actions
- health-check — read_only (approval: none)
- view-logs — read_only (approval: none)
- view-docs — read_only (approval: none)
- restart — reversible_low (approval: none)

## Recent changes
- (none yet)