{ config, lib, ... }: let cfg = config.control.jellyfin; in { config = lib.mkIf cfg.enable { services.jellyfin.enable = true; networking.firewall.allowedTCPPorts = [ 8096 ]; }; }