Media Servers (Jellyfin & Navidrome)¶

# /etc/sysctl.d/99-network-performance.conf
# Kernel-level network performance tuning for maximum throughput

# === Core Network Buffer Sizes ===
net.core.rmem_max = 134217728          # 128MB receive buffer
net.core.wmem_max = 134217728          # 128MB send buffer
net.core.rmem_default = 16777216       # 16MB default receive
net.core.wmem_default = 16777216       # 16MB default send
net.core.optmem_max = 40960            # Ancillary buffer size

# === TCP Buffer Tuning ===
net.ipv4.tcp_rmem = 4096 87380 134217728    # TCP receive buffer (min/default/max)
net.ipv4.tcp_wmem = 4096 65536 134217728    # TCP send buffer (min/default/max)
net.ipv4.tcp_mem = 16777216 16777216 16777216  # TCP memory pages

# === Queue and Backlog Sizes ===
net.core.netdev_max_backlog = 250000   # Packets queued on INPUT side
net.core.netdev_budget = 600           # Packets per NAPI poll
net.core.netdev_budget_usecs = 8000    # Time limit per NAPI poll (microseconds)
net.core.somaxconn = 65535             # Max listen() backlog
net.ipv4.tcp_max_syn_backlog = 8192    # SYN backlog

# === TCP Performance Optimizations ===
net.ipv4.tcp_congestion_control = bbr  # Use BBR congestion control
net.core.default_qdisc = fq            # Fair queue scheduler (optimal for BBR)
net.ipv4.tcp_window_scaling = 1        # Enable window scaling
net.ipv4.tcp_timestamps = 1            # Enable timestamps
net.ipv4.tcp_sack = 1                  # Selective acknowledgment
net.ipv4.tcp_fack = 1                  # Forward acknowledgment
net.ipv4.tcp_low_latency = 1           # Optimize for latency
net.ipv4.tcp_slow_start_after_idle = 0 # Don't reduce cwnd after idle
net.ipv4.tcp_tw_reuse = 1              # Reuse TIME_WAIT sockets
net.ipv4.tcp_fin_timeout = 15          # Faster FIN timeout
net.ipv4.tcp_keepalive_time = 300      # Keepalive probe frequency (seconds)
net.ipv4.tcp_keepalive_probes = 5      # Keepalive probe count
net.ipv4.tcp_keepalive_intvl = 15      # Keepalive probe interval (seconds)
net.ipv4.tcp_max_tw_buckets = 2000000  # Max TIME_WAIT sockets
net.ipv4.tcp_fastopen = 3              # Enable TCP Fast Open (client+server)
net.ipv4.tcp_mtu_probing = 1           # Enable MTU probing
net.ipv4.tcp_no_metrics_save = 1       # Don't cache connection metrics
net.ipv4.tcp_moderate_rcvbuf = 1       # Auto-tune receive buffer

# === UDP Buffer Tuning ===
net.ipv4.udp_rmem_min = 8192
net.ipv4.udp_wmem_min = 8192

# === Connection Tracking ===
net.netfilter.nf_conntrack_max = 2000000
net.nf_conntrack_max = 2000000
net.netfilter.nf_conntrack_tcp_timeout_established = 1200

# === IPv4 General ===
net.ipv4.ip_forward = 0                # Disable if not routing
net.ipv4.ip_local_port_range = 1024 65535  # Expanded port range

# === Security ===
net.ipv4.tcp_syncookies = 1            # SYN flood protection
net.ipv4.conf.all.rp_filter = 1        # Reverse path filtering
net.ipv4.conf.default.rp_filter = 1

# === Core System Limits ===
fs.file-max = 2097152                  # Max file descriptors
fs.inotify.max_user_watches = 524288
fs.inotify.max_user_instances = 524288

# === Virtual Memory ===
vm.swappiness = 10                     # Reduce swap usage
vm.dirty_ratio = 15                    # Start background writeback at 15%
vm.dirty_background_ratio = 5          # Background writeback at 5%
vm.vfs_cache_pressure = 50             # Retain more inode/dentry cache
vm.max_map_count=262144

# === RPS/RFS ===
net.core.rps_sock_flow_entries = 32768

@echo off
cd /d "%~dp0"

if not exist "jellarr" (
    git clone https://github.com/venkyr77/jellarr.git jellarr
    cd jellarr
    npm install
) else (
    cd jellarr
)

npm run dev -- --configFile "%~dp0jellarr_config.yml"

@echo off
setlocal

set REPO_DIR=%~dp0jellyfin
set OUTPUT_DIR=%~dp0jellyfin-build-output

echo Building Jellyfin Server for Debian (linux-x64)...
echo.

cd /d "%REPO_DIR%"

dotnet publish Jellyfin.Server/Jellyfin.Server.csproj ^
    -c Release ^
    -f net10.0 ^
    -r linux-x64 ^
    --self-contained true ^
    -o "%OUTPUT_DIR%"

if %ERRORLEVEL% NEQ 0 (
    echo.
    echo BUILD FAILED
    pause
    exit /b 1
)

echo.
echo Build complete. Output: %OUTPUT_DIR%
echo Transfer this folder to your Debian server and run with: ./jellyfin --webdir /path/to/jellyfin-web/dist
pause

@echo off
cd /d "%~dp0jellyfin-web"
echo Installing dependencies...
call npm ci --engine-strict=false
echo Building local hls.js...
cd /d "%~dp0jellyfin-web\hls.js"
call npm run build
echo Copying local hls.js build over node_modules...
copy /Y "dist\hls.js" "%~dp0jellyfin-web\node_modules\hls.js\dist\hls.js"
copy /Y "dist\hls.js.map" "%~dp0jellyfin-web\node_modules\hls.js\dist\hls.js.map"
cd /d "%~dp0jellyfin-web"
echo Building jellyfin-web (production)...
call npm run build:production
echo Done. Output is in the dist folder.
pause

chmod -R 777 /usr/lib/jellyfin/
ln -sf /usr/lib/jellyfin/jellyfin /usr/bin/jellyfin
ln -s /usr/lib/x86_64-linux-gnu/libjemalloc.so.2 /usr/lib/jellyfin/libjemalloc.so

#!/bin/bash
# Enables EnableCrossLibrarySeriesMerging on all Jellyfin libraries.
# Usage: sudo bash enable-cross-library-merging.sh

JELLYFIN_ROOT="/var/lib/jellyfin/root/default"

if [ ! -d "$JELLYFIN_ROOT" ]; then
    echo "Jellyfin root not found at $JELLYFIN_ROOT"
    exit 1
fi

count=0
for opts in "$JELLYFIN_ROOT"/*/options.xml; do
    [ -f "$opts" ] || continue
    lib="$(basename "$(dirname "$opts")")"

    if grep -q '<EnableCrossLibrarySeriesMerging>true</EnableCrossLibrarySeriesMerging>' "$opts"; then
        echo "[$lib] already enabled"
    elif grep -q '<EnableCrossLibrarySeriesMerging>' "$opts"; then
        sed -i 's|<EnableCrossLibrarySeriesMerging>false</EnableCrossLibrarySeriesMerging>|<EnableCrossLibrarySeriesMerging>true</EnableCrossLibrarySeriesMerging>|' "$opts"
        echo "[$lib] updated false -> true"
        ((count++))
    else
        sed -i 's|</LibraryOptions>|  <EnableCrossLibrarySeriesMerging>true</EnableCrossLibrarySeriesMerging>\n</LibraryOptions>|' "$opts"
        echo "[$lib] inserted"
        ((count++))
    fi
done

echo ""
echo "Updated $count libraries. Restart Jellyfin and rescan libraries to regenerate keys."
echo "  sudo systemctl restart jellyfin"

.homePage .emby-scrollbuttons {
    display: none;
}

.homePage .section0 .itemsContainer {
    display: grid !important;
    grid-template-columns: repeat(auto-fill, min(max(15%, 270px), 650px));
    justify-content: center;
    margin: 0 auto;
    gap: 1em;
}

.homePage .section0 .itemsContainer .card {
    width: 100% !important;
    height: auto !important;
}

.homePage .section0 .itemsContainer .card .cardBox,
.homePage .section0 .itemsContainer .card .cardScalable {
    width: 100% !important;
    padding-bottom: 56.25% !important;
    height: 0 !important;
    position: relative !important;
}

.homeSectionsContainer {
    display: flex;
    flex-direction: column;
}

.homeSectionsContainer .section0 {
    order: 0 !important;
}
.homeSectionsContainer .section1 {
    order: 1 !important;
}
.homeSectionsContainer .section6 {
    order: 2 !important;
}
.homeSectionsContainer .section4 {
    order: 3 !important;
}
.homeSectionsContainer .section2 {
    order: 4 !important;
}
.homeSectionsContainer .section3 {
    order: 5 !important;
}
.homeSectionsContainer .section5 {
    order: 6 !important;
}

.section6 {
    display: flex;
    flex-direction: column;
}
.section6 .verticalSection:nth-child(5) {
    order: 1 !important;
} /* Television */
.section6 .verticalSection:nth-child(4) {
    order: 2 !important;
} /* Movies */
.section6 .verticalSection:nth-child(2) {
    order: 3 !important;
} /* Anime */
.section6 .verticalSection:nth-child(1) {
    order: 4 !important;
} /* Animated */
.section6 .verticalSection:nth-child(3) {
    order: 5 !important;
} /* Cartoons */

.sectionTitleContainer-cards {
    padding-top: 0 !important;
}

.homePage .section1 .overflowBackdropCard,
.homePage .section5 .overflowBackdropCard {
    max-width: max(15%, 270px) !important;
}

.homePage .section6 .card {
    width: min(max(8vw, 120px), 200px) !important;
}

.homePage .padded-left,
.homePage .emby-scroller {
    padding-left: 1% !important;
}

.homePage .section0 .padded-left,
.homePage .section0 .emby-scroller {
    padding-left: 0 !important;
    padding-right: 0 !important;
}

.homePage .section0 > .sectionTitle {
    font-size: 0 !important;
    line-height: 0 !important;
    display: block !important;
    text-align: center !important;
}

#.homePage .section0 > .sectionTitle::after {
#    content: "Libraries";
#    font-size: 1.35rem;
#    line-height: normal;
#}

#!/usr/bin/env bash
set -euo pipefail

# === Navidrome Installer for Debian-based Systems ===

if [[ $EUID -ne 0 ]]; then
    echo "This script must be run as root."
    exit 1
fi

# --- Prompt for user and group ---
read -rp "Enter the Linux user to run Navidrome as: " ND_USER
read -rp "Enter the Linux group to run Navidrome as: " ND_GROUP

# Create group if it doesn't exist
if ! getent group "$ND_GROUP" > /dev/null 2>&1; then
    echo "Group '$ND_GROUP' does not exist. Creating..."
    groupadd "$ND_GROUP"
fi

# Create user if it doesn't exist
if ! id -u "$ND_USER" > /dev/null 2>&1; then
    echo "User '$ND_USER' does not exist. Creating..."
    useradd -r -g "$ND_GROUP" -s /usr/sbin/nologin -M "$ND_USER"
fi

# --- Install dependencies ---
apt update
apt upgrade -y
apt install -y ffmpeg jq curl wget

# --- Create directories ---
install -d -o "$ND_USER" -g "$ND_GROUP" /opt/navidrome
install -d -o "$ND_USER" -g "$ND_GROUP" /var/lib/navidrome

# --- Download latest Navidrome ---
LATEST_VERSION=$(curl -s https://api.github.com/repos/navidrome/navidrome/releases/latest | jq -r '.tag_name' | sed 's/^v//')
echo "Downloading Navidrome v${LATEST_VERSION}..."
wget "https://github.com/navidrome/navidrome/releases/download/v${LATEST_VERSION}/navidrome_${LATEST_VERSION}_linux_amd64.tar.gz" -O /tmp/navidrome.tar.gz

tar -xzf /tmp/navidrome.tar.gz -C /opt/navidrome/
chown -R "$ND_USER":"$ND_GROUP" /opt/navidrome
rm /tmp/navidrome.tar.gz

# --- Write navidrome.toml ---
cat > /var/lib/navidrome/navidrome.toml << 'TOML'
MusicFolder = "/shares/media/Music"

Scanner.Schedule = "0"
Scanner.WatcherWait = "1s"
Scanner.ScanOnStartup = true
Scanner.FollowSymlinks = true
Scanner.PurgeMissing = "always"

DevExternalScanner = true
# NFS share is configured with multithreading
# Otherwise, beware this setting.
DevScannerThreads = 8
DevSelectiveWatcher = true
DevOptimizeDB = true

EnableArtworkPrecache = true
ImageCacheSize = "8GB"
TranscodingCacheSize = "8GB"
RecentlyAddedByModTime = true

#LastFM.ApiKey = ""
#LastFM.Secret = ""
#Spotify.ID = ""
#Spotify.Secret = ""

# === SHARING & AUTH ===
# EnableSharing = true
# AuthWindowLength = "0s"
# AuthRequestLimit = 11111
TOML

chown "$ND_USER":"$ND_GROUP" /var/lib/navidrome/navidrome.toml

# --- Write systemd service ---
cat > /etc/systemd/system/navidrome.service << EOF
[Unit]
Description=Navidrome Music Server and Streamer compatible with Subsonic/Airsonic
After=remote-fs.target network.target
AssertPathExists=/var/lib/navidrome

[Install]
WantedBy=multi-user.target

[Service]
User=${ND_USER}
Group=${ND_GROUP}
Type=simple
ExecStart=/opt/navidrome/navidrome --configfile "/var/lib/navidrome/navidrome.toml"
WorkingDirectory=/var/lib/navidrome
TimeoutStopSec=20
KillMode=process
Restart=on-failure

DevicePolicy=closed
NoNewPrivileges=yes
PrivateTmp=yes
PrivateUsers=yes
ProtectControlGroups=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictNamespaces=yes
RestrictRealtime=yes
SystemCallFilter=~@clock @debug @module @mount @obsolete @reboot @setuid @swap
ReadWritePaths=/var/lib/navidrome

ProtectSystem=full
EOF

# --- Enable and start ---
systemctl daemon-reload
systemctl enable navidrome.service
systemctl start navidrome.service

echo ""
echo "Navidrome v${LATEST_VERSION} installed and running."
echo "  User/Group: ${ND_USER}:${ND_GROUP}"
echo "  Config:     /var/lib/navidrome/navidrome.toml"
echo "  Service:    systemctl status navidrome"
echo "  Web UI:     http://<your-ip>:4533"