diff --git a/flake.nix b/flake.nix
index 6d3790b..c0a6f76 100644
--- a/flake.nix
+++ b/flake.nix
@@ -59,6 +59,7 @@
         ./nixos/services/anki.nix
         ./nixos/services/forgejo.nix
         ./nixos/services/vaultwarden.nix
+        ./nixos/services/jellyfin.nix
       ] [];
 
       vm-sway =
diff --git a/hardware/alpine.nix b/hardware/alpine.nix
index b7beed7..c3f87a0 100644
--- a/hardware/alpine.nix
+++ b/hardware/alpine.nix
@@ -154,6 +154,23 @@ in {
           '';
         };
       };
+      "movies.tristans.cloud" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://localhost:8096";
+          proxyWebsockets = true;
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_set_header X-Forwarded-Protocol $scheme;
+            proxy_set_header X-Forwarded-Host $http_host;
+            proxy_buffering off;
+          '';
+        };
+      };
     };
   };
   security.acme = {
diff --git a/nixos/services/jellyfin.nix b/nixos/services/jellyfin.nix
new file mode 100644
index 0000000..a3273d3
--- /dev/null
+++ b/nixos/services/jellyfin.nix
@@ -0,0 +1,5 @@
+{
+  services.jellyfin = {
+    enable = true;
+  };
+}