From f9efca7e040bba873dcbfc152f3596e090378ab8 Mon Sep 17 00:00:00 2001
From: Paul Buetow <paul@buetow.org>
Date: Sat, 31 Jan 2026 08:30:57 +0200
Subject: config(relayd): add Jellyfin NodePort routing

Amp-Thread-ID: https://ampcode.com/threads/T-019c12b1-e861-773b-8f74-64b6c2255a5f
Co-authored-by: Amp <amp@ampcode.com>
---
 frontends/etc/relayd.conf.tpl | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/frontends/etc/relayd.conf.tpl b/frontends/etc/relayd.conf.tpl
index 3a76edb..3f7e1bc 100644
--- a/frontends/etc/relayd.conf.tpl
+++ b/frontends/etc/relayd.conf.tpl
@@ -15,6 +15,13 @@ table <f3s_registry> {
   192.168.2.122
 }
 
+# Jellyfin NodePorts (bypasses Traefik to avoid double proxy issues)
+table <f3s_jellyfin> {
+  192.168.2.120
+  192.168.2.121
+  192.168.2.122
+}
+
 # Local OpenBSD httpd
 table <localhost> {
   127.0.0.1
@@ -61,6 +68,9 @@ http protocol "https" {
     <% for my $host (@$f3s_hosts) { for my $prefix (@prefixes) {
           if ($host eq 'registry.f3s.buetow.org') { -%>
     match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s_registry>
+    <%   }
+          elsif ($host eq 'jellyfin.f3s.buetow.org') { -%>
+    match request header "Host" value "<%= $prefix.$host -%>" forward to <f3s_jellyfin>
     <%   }
        } } -%>
 
@@ -78,6 +88,8 @@ relay "https4" {
     forward to <localhost> port 8080
     # Registry uses separate port and table
     forward to <f3s_registry> port 30001 check tcp
+    # Jellyfin uses NodePorts (bypasses Traefik)
+    forward to <f3s_jellyfin> port 30096 check tcp
 }
 
 relay "https6" {
@@ -88,6 +100,8 @@ relay "https6" {
     forward to <localhost> port 8080
     # Registry uses separate port and table
     forward to <f3s_registry> port 30001 check tcp
+    # Jellyfin uses NodePorts (bypasses Traefik)
+    forward to <f3s_jellyfin> port 30096 check tcp
 }
 
 tcp protocol "gemini" {
-- 
cgit v1.2.3