Rebase to flake parts #10

modules/hosts/nix-server/_services/jellyfin.nix

@@ -1,5 +1,5 @@
 # Jellyfin (native NixOS service). Local media: /var/lib/media (group `media`; jellyfin + server).
-# Dashboard: Movies → /var/lib/media/movies, Shows → /var/lib/media/tv (see jellyfin-remote-storage.nix
+# Dashboard: Movies → /var/lib/media/movies, Shows → /var/lib/media/tv (see nixdesk-nfs-client.nix
 # for bulk libraries on nixdesk at /mnt/nixdesk-jellyfin/{movies,tv}).
 # Do not use "Mixed Movies and Shows" (deprecated): https://jellyfin.org/docs/general/server/media/mixed-movies-and-shows
 # Dedicated disk: fileSystems."/var/lib/media" in hardware.nix, then fix ownership.
@@ -53,8 +53,9 @@
   # not writable by uid jellyfin (it only had group `jellyfin`), so deletes fail.
   systemd.services.jellyfin.serviceConfig = {
     SupplementaryGroups = [ "media" ];
-    # Jellyfin libraries may live on NFS (e.g. /mnt/nixdesk-jellyfin). PrivateUsers breaks
-    # uid mapping for NFS auth in practice; disable so deletes use the real host jellyfin uid.
+    # Jellyfin libraries on NFS (e.g. /mnt/media, /mnt/nixdesk-jellyfin). PrivateUsers breaks
+    # uid mapping for NFS auth in practice; disable so metadata writes use the real jellyfin uid
+    # (squashed to olivier:nfsmedia on nixdesk exports).
     PrivateUsers = lib.mkForce false;
   };
 }