From fa7b646b8e221964da9cb26a208d40b5a632d4dc Mon Sep 17 00:00:00 2001
From: Sakooooo <78461130+Sakooooo@users.noreply.github.com>
Date: Sun, 5 Jan 2025 10:17:20 +0400
Subject: [PATCH] jellyfin cache nginx

---
 modules/server/media/jellyfin.nix | 57 ++++++++++++++++++-------------
 1 file changed, 34 insertions(+), 23 deletions(-)

diff --git a/modules/server/media/jellyfin.nix b/modules/server/media/jellyfin.nix
index cd8d6c51..073b1d0e 100644
--- a/modules/server/media/jellyfin.nix
+++ b/modules/server/media/jellyfin.nix
@@ -13,34 +13,45 @@ in {
         group = "media";
       };
 
-      nginx.virtualHosts = {
-        "jellyfin.sako.box" = {
-          forceSSL = true;
-          sslCertificate = "/srv/secrets/certs/sako.box.pem";
-          sslCertificateKey = "/srv/secrets/certs/sako.box-key.pem";
-          extraConfig = ''
-                    add_header X-Frame-Options "SAMEORIGIN";
-                    add_header X-Content-Type-Options "nosniff";
-            add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" always;
-            add_header Content-Security-Policy "default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'";
+      nginx = {
+        proxyCachePath."jellyfin" = {
+          enable = true;
+          levels = "1:2";
+          inactive = "1w";
+          maxSize = "5g";
+          useTempPath = false;
+          keysZoneName = "jellyfin_cache";
+          keysZoneSize = "10m";
+        };
+        virtualHosts = {
+          "jellyfin.sako.box" = {
+            forceSSL = true;
+            sslCertificate = "/srv/secrets/certs/sako.box.pem";
+            sslCertificateKey = "/srv/secrets/certs/sako.box-key.pem";
+            extraConfig = ''
+                      add_header X-Frame-Options "SAMEORIGIN";
+                      add_header X-Content-Type-Options "nosniff";
+              add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" always;
+              add_header Content-Security-Policy "default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'self'";
 
-          '';
-          locations = {
-            "/" = {
-              proxyPass = "http://localhost:8096";
-              extraConfig = ''
-                # Disable buffering when the nginx proxy gets very resource heavy upon streaming
-                proxy_buffering off;
-              '';
-            };
-            "/socket" = {
-              proxyPass = "http://localhost:8096";
-              proxyWebsockets = true;
+            '';
+            locations = {
+              "/" = {
+                proxyPass = "http://localhost:8096";
+                extraConfig = ''
+                                    # Disable buffering when the nginx proxy gets very resource heavy upon streaming
+                                    proxy_buffering off;
+                  proxy_cache jellyfin_cache;
+                '';
+              };
+              "/socket" = {
+                proxyPass = "http://localhost:8096";
+                proxyWebsockets = true;
+              };
             };
           };
         };
       };
     };
-
   };
 }