services:
  jellyfin:
    image: lscr.io/linuxserver/jellyfin:latest
    container_name: jellyfin
    restart: unless-stopped
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
    volumes:
      - ./config:/config
      - ./cache:/cache
      - /mnt/fs.bob/filme:/media/movies:ro
      - /mnt/fs.bob/serien:/media/shows:ro
    ports:
      # HTTP direkt für Android TV / Chromecast – vertrauen der mkcert-CA nicht,
      # daher kein TLS. Browser-Zugriff läuft weiterhin über Traefik (https://jellyfin.core.bob).
      - "8096:8096"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.jellyfin.rule=Host(`jellyfin.core.bob`)"
      - "traefik.http.routers.jellyfin.entrypoints=websecure"
      - "traefik.http.routers.jellyfin.tls=true"
      - "traefik.http.services.jellyfin.loadbalancer.server.port=8096"
    networks:
      - traefik

networks:
  traefik:
    external: true