--- apiVersion: apps/v1 kind: Deployment metadata: name: jellyfin namespace: default spec: replicas: 1 selector: matchLabels: app: jellyfin template: metadata: labels: app: jellyfin spec: securityContext: runAsGroup: 1000 runAsUser: 1000 supplementalGroups: - 128 - 226 - 106 - 44 - 104 nodeSelector: type: jellyfin containers: - name: jellyfin image: jellyfin/jellyfin:10.10.7 ports: - containerPort: 8096 volumeMounts: - name: media mountPath: /media readOnly: true recursiveReadOnly: Enabled - name: config mountPath: /config - name: cache mountPath: /cache - name: card mountPath: /dev/dri/renderD128 securityContext: privileged: true volumes: - name: config hostPath: path: /home/akshun/jellyfin/ type: Directory - name: cache persistentVolumeClaim: claimName: longhorn-jellyfin-cache - name: media nfs: server: 10.0.0.123 path: /merge - name: card persistentVolumeClaim: claimName: jellyfin-intel-pvc