{ pkgs, inputs, ... }:
let
  unstable = import inputs.unstable { system = pkgs.system; };
in
{systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD"; # or i965 for older GPUs
  environment.sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
  hardware.graphics = {
    enable = true;
    extraPackages = with pkgs; [
      intel-ocl # Generic OpenCL support

      # For Broadwell and newer (ca. 2014+), use with LIBVA_DRIVER_NAME=iHD:
      intel-media-driver
    ];
  };

  nixpkgs.config.permittedInsecurePackages = [
    "dotnet-sdk-6.0.428"
    "aspnetcore-runtime-6.0.36"
  ];

  users.users."starr" = {
    isSystemUser = true;
    group = "starr";
    extraGroups = [ "jellyfin" ];
  };

  users.users.sonarr.extraGroups = [
    "jellyfin"
    "radarr"
    "transmission"
    "starr"
  ];
  users.users.radarr.extraGroups = [
    "jellyfin"
    "sonarr"
    "transmission"
    "starr"
  ];
  users.users.bazarr.extraGroups = [
    "jellyfin"
    "sonarr"
    "transmission"
    "starr"
    "radarr"
  ];
  users.users.lidarr.extraGroups = [
    "jellyfin"
    "starr"
    "transmission"
  ];

  users.users.whisparr.extraGroups = [
    "jellyfin"
    "starr"
    "transmission"
  ];

  users.users.shobu.extraGroups = [
    "jellyfin"
    "starr"
    "transmission"
    "radarr"
    "sonarr"
  ];

  users.groups = {
    starr = { };
  };

  services = {
    jellyfin = {
      enable = true;
      openFirewall = true;
    };

    sonarr = {
      enable = true;
      openFirewall = true;
      group = "starr";
      settings = {
        authentication.AuthenticationMethod = "external";
        authentication.AuthenticationType = "enabled";
      };
    };
    radarr = {
      enable = true;
      openFirewall = true;
      group = "starr";
      settings = {
        authentication.AuthenticationMethod = "external";
        authentication.AuthenticationType = "enabled";
      };
    };
    prowlarr = {
      enable = true;
      openFirewall = true;
      settings = {
        authentication.AuthenticationMethod = "external";
        authentication.AuthenticationType = "enabled";
      };
    };
    bazarr = {
      enable = true;
      openFirewall = true;
    };
    lidarr = {
      enable = true;
      openFirewall = true;
      settings = {
        authentication.AuthenticationMethod = "external";
        authentication.AuthenticationType = "enabled";
      };
    };
    whisparr = {
      enable = true;
      openFirewall = true;
      settings = {
        authentication.AuthenticationMethod = "external";
        authentication.AuthenticationType = "enabled";
      };
    };

    jellyseerr = {
      enable = true;
      openFirewall = true;
    };
  };

  environment.systemPackages = [
    pkgs.jellyfin
    pkgs.jellyfin-web
    pkgs.jellyfin-ffmpeg
  ];
}