test

hosts/sin/jellyfin.nix

@@ -2,18 +2,15 @@
 let
   unstable = import inputs.unstable { system = pkgs.system; };
 in
-{
-  nixpkgs.config.packageOverrides = pkgs: {
-    vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
-  };
+{systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
+  environment.sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
   hardware.graphics = {
     enable = true;
     extraPackages = with pkgs; [
+      intel-ocl # Generic OpenCL support
+
+      # For Broadwell and newer (ca. 2014+), use with LIBVA_DRIVER_NAME=iHD:
       intel-media-driver
-      intel-vaapi-driver
-      libva-vdpau-driver
-      intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
-      vpl-gpu-rt # QSV on 11th gen or newer
     ];
   };
 

hosts/sin/mailserver.nix

@@ -0,0 +1,37 @@
+{
+  inputs,
+  config,
+  lib,
+  ...
+}:
+let
+  inherit (lib)
+    mkDefault
+    ;
+in
+{
+  imports = [
+    inputs.simple-mailserver.default
+  ];
+
+  security.acme = {
+    acceptTerms = mkDefault true;
+    certs.${config.mailserver.fqdn} = {
+    };
+  };
+
+  mailserver = {
+    enable = true;
+    stateVersion = 3;
+    fqdn = "mail.shobu.fr";
+    domains = [ "shobu.fr" ];
+
+    x509.useACMEHost = config.mailserver.fqdn;
+
+    loginAccounts = {
+      "auth@shobu.fr" = {
+        password = "$y$j9T$aLAZYUOUrc2jxcNYGy1qt/$B1ZdufZtzJJmnLYIYW11nk1BwIIy1Xkjxb7lx3ge/Z3";
+      };
+    };
+  };
+}