From 152b1f600f44f9cd55d295b3cb12d26a8f5f66e2 Mon Sep 17 00:00:00 2001
From: Polen <polensky@pm.me>
Date: Fri, 28 Nov 2025 13:24:37 -0500
Subject: [PATCH] networking, moving services, jellyfin work!

---
 devices/latoure/configuration.nix | 10 ++++++++++
 devices/server/configuration.nix  | 20 ++++++--------------
 devices/xps13/configuration.nix   |  3 +++
 3 files changed, 19 insertions(+), 14 deletions(-)

diff --git a/devices/latoure/configuration.nix b/devices/latoure/configuration.nix
index 4c529a9..8e4e97b 100644
--- a/devices/latoure/configuration.nix
+++ b/devices/latoure/configuration.nix
@@ -57,6 +57,16 @@
     };
   };
 
+  services = {
+    sonarr = {
+      enable = true;
+    };
+    prowlarr = {
+      enable = true;
+      openFirewall = true;
+    };
+  };
+
   # Set your time zone.
   time.timeZone = "America/Toronto";
 
diff --git a/devices/server/configuration.nix b/devices/server/configuration.nix
index 60c2456..e892020 100644
--- a/devices/server/configuration.nix
+++ b/devices/server/configuration.nix
@@ -48,12 +48,6 @@ in {
         {
           job_name = "node-exporters-lan";
           static_configs = [
-            #{
-            #  targets = ["192.168.1.241:9100"];
-            #  labels = {
-            #    instance = "pi";
-            #  };
-            #}
             {
               targets = ["127.0.0.1:9100"];
               labels = {
@@ -66,16 +60,14 @@ in {
     };
   };
 
+  systemd.services.jellyfin = {
+    environment = {
+      DOTNET_SYSTEM_IO_DISABLEFILELOCKING = "1";
+    };
+  };
+
   # media
   services = {
-    sonarr = {
-      inherit user;
-      enable = true;
-    };
-    prowlarr = {
-      enable = true;
-      openFirewall = true;
-    };
     jellyfin = {
       inherit user;
       enable = true;
diff --git a/devices/xps13/configuration.nix b/devices/xps13/configuration.nix
index 820cce4..a182c04 100644
--- a/devices/xps13/configuration.nix
+++ b/devices/xps13/configuration.nix
@@ -159,6 +159,9 @@
   # services.openssh.enable = true;
 
   # Open ports in the firewall.
+  networking.firewall.allowedUDPPorts = [
+    5353 # mDNS
+  ];
   # networking.firewall.allowedTCPPorts = [ ... ];
   # networking.firewall.allowedUDPPorts = [ ... ];
   # Or disable the firewall altogether.