nix/hosts/laptop-server/config/services/jellyfin.nix

{ ... }:
{
    containers.jellyfin = {
        config = { pkgs, ...}: {
            system.stateVersion = "25.05";

            services.jellyfin = {
                enable = true;
                package = pkgs.jellyfin;
            };

            # Firewall on the host system is enough + this firewall seems to break networking
            networking.firewall.enable = false;
        };
        autoStart = true;
        privateNetwork = true;
        hostAddress = "172.30.1.2"; # TODO define in  config option
        localAddress = "172.30.0.2";
    };

    networking = {
        firewall.trustedInterfaces = [ "ve-jellyfin" ];
        nat.internalInterfaces = [ "ve-jellyfin" ];
        networkmanager.unmanaged = [ "interface-name:ve-jellyfin" ];
    };
}