Halkali merkez neighborhood fatih st ozgur apt no 46 , Kucukcekmece , Istanbul , 34303 , TR
Deploy Jellyfin with Docker on Ubuntu, including media permissions, Nginx HTTPS, NVIDIA Container Toolkit, NVENC/NVDEC transcoding, remote access, backup and real GPU verification.
Deploy Jellyfin with Docker on Ubuntu, including media permissions, Nginx HTTPS, NVIDIA Container Toolkit, NVENC/NVDEC transcoding, remote access, backup and real GPU verification. Every command is presented as an operational step; replace example hostnames, passwords and secrets before execution.
Turkey (Turkish)
Germany (German)
Worldwide (English)
lspci -nn | grep -Ei "3d|display|vga"
nvidia-smi
ls -l /dev/nvidia*distribution=$(. /etc/os-release;echo $ID$VERSION_ID)
curl -fsSL https://nvidia.github.io/libnvidia-container/gpgkey | sudo gpg --dearmor -o /usr/share/keyrings/nvidia-container-toolkit-keyring.gpg
curl -s -L https://nvidia.github.io/libnvidia-container/stable/deb/nvidia-container-toolkit.list | sed "s#deb https://#deb [signed-by=/usr/share/keyrings/nvidia-container-toolkit-keyring.gpg] https://#" | sudo tee /etc/apt/sources.list.d/nvidia-container-toolkit.list
sudo apt update
sudo apt install -y nvidia-container-toolkit
sudo nvidia-ctk runtime configure --runtime=docker
sudo systemctl restart dockerservices:
jellyfin:
image: jellyfin/jellyfin:10
container_name: jellyfin
restart: unless-stopped
user: "1000:1000"
ports:
- 127.0.0.1:8096:8096
volumes:
- ./config:/config
- ./cache:/cache
- /srv/media:/media:ro
deploy:
resources:
reservations:
devices:
- driver: nvidia
count: all
capabilities: [gpu]sudo mkdir -p /opt/jellyfin/config /opt/jellyfin/cache /srv/media
sudo chown -R 1000:1000 /opt/jellyfin
sudo find /srv/media -type d -exec chmod 755 {} \;
sudo docker compose up -d
sudo docker compose pssudo docker exec jellyfin nvidia-smi
sudo docker exec jellyfin /usr/lib/jellyfin-ffmpeg/ffmpeg -version
sudo docker logs --tail 100 jellyfinwatch -n 1 nvidia-smi
sudo docker exec jellyfin sh -lc "ls -lah /cache/transcodes"
sudo docker logs -f jellyfin | grep -Ei "ffmpeg|nvenc|nvdec|transcod"sudo docker stop jellyfin
sudo tar -C /opt/jellyfin -czf /root/jellyfin-config-$(date +%F).tar.gz config
sudo docker start jellyfin
sha256sum /root/jellyfin-config-$(date +%F).tar.gzsudo apt update
sudo apt install -y nginx certbot python3-certbot-nginx
sudo tee /etc/nginx/sites-available/media.example.com > /dev/null <<'NGINX'
server {
listen 80;
listen [::]:80;
server_name media.example.com;
client_max_body_size 10G;
proxy_read_timeout 3600;
proxy_send_timeout 3600;
location / {
proxy_pass http://127.0.0.1:8096;
proxy_http_version 1.1;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
}
}
NGINX
sudo ln -s /etc/nginx/sites-available/media.example.com /etc/nginx/sites-enabled/media.example.com
sudo nginx -t
sudo systemctl reload nginxsudo certbot --nginx -d media.example.com --redirect --agree-tos --no-eff-email -m [email protected]
sudo certbot renew --dry-run
curl -I https://media.example.com
openssl s_client -connect media.example.com:443 -servername media.example.com </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -dates| Belirti / Symptom | Kök neden ve çözüm / Root cause and fix |
|---|---|
| Service or container does not start | Inspect compose configuration, dependency health, file permissions and the first fatal log line instead of repeatedly restarting. |
| Domain opens but HTTPS fails | Check A/AAAA records, ports 80/443, proxy mode, certificate challenge and conflicting reverse proxies. |
| Application cannot reach its database or queue | Use the internal service hostname, verify credentials and health checks, and keep database ports off the public interface. |
| Works initially but fails under load | Measure memory peaks, disk latency, connection pools and worker concurrency; increase capacity only after identifying the bottleneck. |
Yes after secrets are replaced, public access is restricted and a complete restore test has succeeded.
Minimums only prove the software can start. Size CPU, memory, IOPS and storage from representative workload measurements.
Yes. Use Full (strict) TLS and configure origin certificates, WebSockets and client IP forwarding where required.
Do not automatically apply major releases. Review migrations, back up data and retain the previous tested image.
Back up databases, uploaded files, persistent volumes, configuration, encryption keys and the deployed version together.
An NVMe VPS fits normal web workloads. Inference, accelerated OCR and video transcoding may require a compatible GPU.
Deploy Jellyfin with Docker on Ubuntu, including media permissions, Nginx HTTPS, NVIDIA Container Toolkit, NVENC/NVDEC transcoding, remote access, backup and real GPU verification.