diff --git a/hosts/layne/services/apps/default.nix b/hosts/layne/services/apps/default.nix
index 7e0599e..0c78432 100644
--- a/hosts/layne/services/apps/default.nix
+++ b/hosts/layne/services/apps/default.nix
@@ -1,5 +1,6 @@
 _: {
   imports = [
+    ./jellyfin.nix
     ./transmission.nix
     ../../../shared/prometheus-exporters.nix
     ../../../shared/promtail.nix
diff --git a/hosts/layne/services/apps/jellyfin.nix b/hosts/layne/services/apps/jellyfin.nix
new file mode 100644
index 0000000..9adbbf4
--- /dev/null
+++ b/hosts/layne/services/apps/jellyfin.nix
@@ -0,0 +1,26 @@
+_: {
+  services = {
+    caddy = {
+      virtualHosts = {
+        "jellyfin.local.adtya.xyz" = {
+          extraConfig = ''
+            reverse_proxy 127.0.0.1:8096
+            tls /persist/secrets/caddy/certs/default.crt /persist/secrets/caddy/certs/default.key
+          '';
+        };
+        "jellyfin.labs.adtya.xyz" = {
+          extraConfig = ''
+            reverse_proxy 127.0.0.1:8096
+            tls /persist/secrets/caddy/certs/default.crt /persist/secrets/caddy/certs/default.key
+          '';
+        };
+      };
+    };
+    jellyfin = {
+      enable = true;
+      dataDir = "/mnt/data/Jellyfin";
+      openFirewall = true;
+    };
+  };
+  systemd.services.jellyfin.unitConfig.RequiresMountsFor = [ "/mnt/data" ];
+}
diff --git a/hosts/rico0/services/apps/blocky.nix b/hosts/rico0/services/apps/blocky.nix
index 675c700..3d849de 100644
--- a/hosts/rico0/services/apps/blocky.nix
+++ b/hosts/rico0/services/apps/blocky.nix
@@ -72,6 +72,8 @@ _: {
             "loki.labs.adtya.xyz" = "10.10.10.10,fd7c:585c:c4ae::10";
             "prometheus.labs.adtya.xyz" = "10.10.10.10,fd7c:585c:c4ae::10";
             "transmission.labs.adtya.xyz" = "10.10.10.14,fd7c:585c:c4ae::14";
+            "jellyfin.labs.adtya.xyz" = "10.10.10.14,fd7c:585c:c4ae::14";
+            "jellyfin.local.adtya.xyz" = "192.168.1.14";
           };
         };
         conditional = {