diff --git a/coredns/packetlost.dev.hosts b/coredns/packetlost.dev.hosts
index e10f446..1f76e7c 100644
--- a/coredns/packetlost.dev.hosts
+++ b/coredns/packetlost.dev.hosts
@@ -1,8 +1,10 @@
 # Services
 192.168.1.3 git.packetlost.dev
 192.168.1.3 plex.packetlost.dev
+192.168.1.3 jellyfin.packetlost.dev
 192.168.1.3 nats.packetlost.dev
 fe80::9ab7:85ff:fe1e:dfe8 plex.packetlost.dev
+fe80::9ab7:85ff:fe1e:dfe8 jellyfin.packetlost.dev
 fe80::9ab7:85ff:fe1e:dfe8 nats.packetlost.dev
 # Old edge proxy was 192.168.1.15
 
diff --git a/packages.nix b/packages.nix
index 4a65778..63fa223 100644
--- a/packages.nix
+++ b/packages.nix
@@ -109,5 +109,6 @@ in
     "plexmediaserver"
     "sftpgo"
     "teamspeak-server"
+    "ffmpeg-full"
   ];
 }
diff --git a/services.nix b/services.nix
index 0c2e128..b9fed49 100644
--- a/services.nix
+++ b/services.nix
@@ -303,6 +303,17 @@ in
     package = unstable.plex;
   };
 
+  services.jellyfin = {
+    enable = true;
+    openFirewall = true;
+    user = "noah";
+    group = "nas";
+    logDir = "/srv/shokuhou/applications/jellyfin/log";
+    cacheDir = "/srv/shokuhou/applications/jellyfin/cache";
+    dataDir = "/srv/shokuhou/applications/jellyfin/data";
+    configDir = "/srv/shokuhou/applications/jellyfin/config";
+  };
+
   #  services.gitea = {
   #    enable = true;
   #    user = "git";
@@ -426,6 +437,14 @@ in
       #  }
       #'';
     };
+    virtualHosts."jellyfin.packetlost.dev" = {
+      forceSSL = true;
+      enableACME = true;
+      http2 = true;
+      locations."/" = {
+        proxyPass = "http://localhost:8096/";
+      };
+    };
 
     # give a name to the virtual host. It also becomes the server name.
     virtualHosts."plex.packetlost.dev" = {