Ansible Role: Jellyfin

Install and configure Jellyfin - a free media system - as a Docker container, with media read from an NFS share.

Requirements

• A Docker host (the role does not install Docker itself).
• A group named blackbeard that already exists on the host. The role adds the jellyfin user to it but does not create it.
• A GPU render device at /dev/dri (passed through to the container for hardware transcoding).
• Access to the NFS server 192.168.10.41 exporting /srv/nfs/media (NFS 4.2). The address and export are hardcoded in tasks/jellyfin.yaml.

Dependencies

The playbook (playbook.yaml) runs these roles, in order, before jellyfin:

• docker
• traefik

Variables

The role has no defaults/main.yaml. The variables below are used by the tasks and must come from the inventory.

Variable	Required	Default	Description
jellyfin_puid	Yes		UID of the jellyfin user, also used as container PUID
blackbeard_guid	Yes		GID of the blackbeard group, used as container PGID
timezone	Yes		Timezone passed to the container as TZ

Example

jellyfin_puid: "1001"
blackbeard_guid: "1000"
timezone: "Europe/Amsterdam"

What the role does

• Creates the jellyfin user (shell /bin/bash, UID jellyfin_puid, group blackbeard).
• Creates /mnt/jellyfin/config (owner jellyfin, group blackbeard, mode 0775).
• Creates a local Docker volume media of type nfs4 pointing at :/srv/nfs/media on 192.168.10.41.
• Runs the jellyfin container from cr.simoncor.net/lscr/linuxserver/jellyfin:12.0ubu2604-ls48 on the host network (so Jellyfin listens on its default port 8096), always pulled, restart policy unless-stopped, json-file logs (max 5m x 3).
• Mounts /mnt/jellyfin/config on /config, the media volume on /mnt/media/ and passes through /dev/dri.
• Cleans up Docker afterwards (tasks/cleanup.yaml): docker_prune and docker system prune --all --force --volumes, which removes all unused images, networks and volumes on the host.

Usage

Run playbook.yaml through Semaphore. It first runs ansible-galaxy install -f -r roles/requirements.yml on the controller (works around a Semaphore bug), then the docker, traefik and jellyfin roles on all hosts.