{
  hosts ? [ ],
}:

{ lib, flakeLib, ... }:

{
  services.emby = {
    enable = true;
  };

  systemd.services.emby = {
    environment = {
      VDPAU_DRIVER = "radeonsi";
      LIBVA_DRIVER_NAME = "radeonsi";
    };

    serviceConfig = {
      StateDirectory = "emby";

      DeviceAllow = [
        "/dev/dri/card0"
        "/dev/dri/renderD128"
      ];

      SystemCallFilter = lib.mkForce [ ];

    };
  };

  users.users.emby.extraGroups = [
    "media"
    "render"
    "video"
  ];

  # Caddy reverse proxy configuration
  services.caddy.virtualHosts = flakeLib.mkProxies hosts ''
    reverse_proxy :8096
  '';
}