Try to get NixOS Jellyfin to work

services/jellyfin/default.nix

@@ -10,26 +10,53 @@ in {
     enable = lib.mkEnableOption "Enable minimal config";
   };
   config = lib.mkIf cfg.enable {
-    environment.systemPackages = [pkgs.cifs-utils];
-    # Intel Hardware Acceleration config
-    nixpkgs.config.packageOverrides = pkgs: {
-      vaapiIntel = pkgs.vaapiIntel.override { enableHybridCodec = true; };
-    };
-    hardware.graphics = {
-      enable = true;
-      extraPackages = with pkgs; [
-        intel-media-driver
-        intel-vaapi-driver # previously vaapiIntel
-        vaapiVdpau
-        libvdpau-va-gl
-        intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
-        vpl-gpu-rt # QSV on 11th gen or newer
+    systemd.services.jellyfin.environment.LIBVA_DRIVER_NAME = "iHD";
+    environment = {
+      sessionVariables = { LIBVA_DRIVER_NAME = "iHD"; };
+      systemPackages = with pkgs; [
+        cifs-utils
+        intel-gpu-tools
       ];
     };
-    services.jellyfin = {
-      enable = true;
-      user = "tbarnouin";
-      openFirewall = true;
+    # Intel Hardware Acceleration config
+    hardware = {
+      intel-gpu-tools.enable = true;
+      graphics = {
+        enable = true;
+        extraPackages = with pkgs; [
+          intel-media-driver
+          vaapiVdpau
+          libvdpau-va-gl
+          intel-compute-runtime # OpenCL filter support (hardware tonemapping and subtitle burn-in)
+          vpl-gpu-rt # QSV on 11th gen or newer
+        ];
+        extraPackages32 = with pkgs.pkgsi686Linux; [
+          intel-media-driver
+        ];
+      };
+    };
+    services = {
+      crowdsec = {
+        hub.collections = [
+          "LePresidente/jellyfin"
+        ];
+        localConfig = {
+          acquisitions = [
+            {
+              source = "journalctl";
+              journalctl_filter = [ "_SYSTEMD_UNIT=jellyfin.service" ];
+              labels = {
+                type = "syslog";
+              };
+            }
+          ];
+        };
+      };
+      jellyfin= {
+        enable = true;
+        user = "tbarnouin";
+        openFirewall = true;
+      };
     };
     fileSystems."/mnt/media" = {
       device = "192.168.1.125:/BIGDATA";

services/minimalConfig/default.nix

@@ -40,7 +40,7 @@
   users = {
     users.tbarnouin = {
       isNormalUser = true;
-      extraGroups = ["wheel"];
+      extraGroups = ["wheel" "video" "render"];
       shell = pkgs.zsh;
       openssh.authorizedKeys.keys = [
         "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAxccGxdfOFXeEClqz3ULl94ubzaJnk4pUus+ek18G0B tbarnouin@nixos"