jellyfin:
    image: linuxserver/jellyfin:10.10.7
    networks:
      - media-net
      - pangolin-public
    environment:
      PUID: 1000
      PGID: 1000
      TZ: UTC
    volumes:
      - jellyfin_config:/config
      - media_local:/data
    devices:
      - /dev/dri:/dev/dri # GPU device for hardware acceleration
      - /dev/mali0:/dev/mali0 # Mali GPU (if available)
      - /dev/mpp_service:/dev/mpp_service # Rockchip MPP service
    # group_add:
    #   - "44" # video group
    #   - "991" # render group (adjust based on your system)
    privileged: true
#    ports:
#      - 8096:8096
#      - 7359:7359/udp
#      - 8920:8920
    restart: unless-stopped

workers:
    image: ghcr.io/immich-app/immich-server:release
    # extends:
    #   file: hwaccel.transcoding.yml
    #   service: cpu # set to one of [nvenc, quicksync, rkmpp, vaapi, vaapi-wsl] for accelerated transcoding
    networks:
      - immich-net
      - postgres-net
    security_opt: # enables full access to /sys and /proc, still far better than privileged: true
      - systempaths=unconfined
      - apparmor=unconfined
    # group_add:
    #   - video
    privileged: true
    devices:
      - /dev/rga:/dev/rga
      - /dev/dri:/dev/dri
      - /dev/dma_heap:/dev/dma_heap
      - /dev/mpp_service:/dev/mpp_service
      - /dev/mali0:/dev/mali0 # only required to enable OpenCL-accelerated HDR -> SDR tonemapping
    volumes:
      # - /etc/OpenCL:/etc/OpenCL:ro # only required to enable OpenCL-accelerated HDR -> SDR tonemapping
      - /usr/lib/aarch64-linux-gnu/libmali.so.1:/usr/lib/aarch64-linux-gnu/libmali.so.1:ro # only required to enable OpenCL-accelerated HDR -> SDR tonemapping

      - data:/data
      - external_libraries:/external-libraries

      - /etc/localtime:/etc/localtime:ro
    environment:
      UPLOAD_LOCATION: /data
      IMMICH_VERSION: release
      DB_URL: "postgresql://immich:password@postgres:5432/immich"
      IMMICH_WORKERS_EXCLUDE: 'api'