# Generated by oikos build-hosts from inventory.yaml.
# Do NOT edit by hand.

host: strong
kind: lxc
lan_ip: 192.168.8.246
mcp_endpoint: https://mcp.hubris.network/mcp
mesh:
  tailscale:
    fqdn: jellyfin
mesh_globals:
  accepted:
    - netbird
    - tailscale
  primary: netbird
mounts:
  - /mnt/media_local
name: jellyfin
notes:
  - Jellyfin 10.11.11 with VAAPI hardware acceleration (Radeon 680M iGPU on strong)
  - 4 cores / 8 GiB RAM / 1 GiB swap
  - SSO-Auth plugin v4.0.0.4 with Authentik OIDC (no Caddy forward-auth gate)
  - GPU passed via dev0+dev1: /dev/dri/renderD128 + card0
  - Migrated from hubris to strong 2026-07-05 (Phase 2). Library on ludo-lvm.
os: linux
public_host: media.hubris.network
pve_id: 101
role: media-server
runs:
  - jellyfin
secrets_issuance_endpoint: https://secrets.hubris.network/issue
services_hosted:
  - backend: jellyfin
    doc_page: knowledge/wiki/containers/101-jellyfin.md
    name: jellyfin
    risk_notes: native Authentik OIDC via SSO-Auth plugin, no Caddy forward-auth gate; VAAPI transcode depends on GPU passthrough on strong
    url: https://media.hubris.network
state: active