fix: harden jellyfin profile docs and image lock coverage

Author: liamvibecodes

.github/workflows/validate.yml

@@ -27,4 +27,5 @@ jobs:
         run: |
           cp .env.example .env
           docker compose --profile autoupdate config >/dev/null
+          docker compose --profile jellyfin config >/dev/null
           rm .env

IMAGE_LOCK.md

@@ -17,6 +17,7 @@ Tested lock snapshot:
 | sonarr | `lscr.io/linuxserver/sonarr@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1` |
 | prowlarr | `lscr.io/linuxserver/prowlarr@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134` |
 | seerr | `ghcr.io/seerr-team/seerr@sha256:1b5fc1ea825631d9d165364472663b817a4c58ef6aa1013f58d82c1570d7c866` |
+| jellyfin (optional) | `lscr.io/linuxserver/jellyfin@sha256:4ee07757abcaa0b74fbc74179392311dc2874c03b0bef04bc2d79e9e1a875793` |
 | watchtower (optional) | `containrrr/watchtower@sha256:6dd50763bbd632a83cb154d5451700530d1e44200b268a4e9488fefdfcf2b038` |
 
 ## Updating The Lock

README.md

@@ -95,7 +95,9 @@ cd mac-media-stack
 bash scripts/setup.sh        # creates folders, generates .env
 # edit .env and add your VPN keys
 bash scripts/doctor.sh       # preflight validation before first boot
-docker compose up -d          # start everything
+docker compose up -d         # start everything
+# if MEDIA_SERVER=jellyfin in .env:
+docker compose --profile jellyfin up -d
 docker compose --profile autoupdate up -d watchtower  # optional auto-updates
 bash scripts/configure.sh     # auto-configure all services
 ```

SETUP.md

@@ -333,6 +333,8 @@ docker compose down
 ```bash
 cd ~/mac-media-stack
 docker compose up -d
+# If using Jellyfin:
+docker compose --profile jellyfin up -d
 ```
 
 **Need help?**

docker-compose.yml

@@ -153,7 +153,7 @@ services:
     restart: unless-stopped
 
   jellyfin:
-    image: lscr.io/linuxserver/jellyfin:latest
+    image: lscr.io/linuxserver/jellyfin@sha256:4ee07757abcaa0b74fbc74179392311dc2874c03b0bef04bc2d79e9e1a875793
     container_name: jellyfin
     profiles: ["jellyfin"]
     environment:

scripts/refresh-image-lock.sh

@@ -9,8 +9,8 @@ COMPOSE_FILE="$SCRIPT_DIR/docker-compose.yml"
 LOCK_FILE="$SCRIPT_DIR/IMAGE_LOCK.md"
 ENV_FILE="$SCRIPT_DIR/.env"
 
-PROFILES=(autoupdate)
-OPTIONAL_SERVICES=(watchtower)
+PROFILES=(autoupdate jellyfin)
+OPTIONAL_SERVICES=(watchtower jellyfin)
 
 for cmd in docker awk sed mktemp; do
     if ! command -v "$cmd" >/dev/null 2>&1; then

scripts/setup.sh

@@ -102,6 +102,7 @@ echo ""
 echo "Next steps:"
 echo "  1. Add VPN keys to .env (if not already done)"
 echo "  2. Run: docker compose up -d"
+echo "     (or: docker compose --profile jellyfin up -d if MEDIA_SERVER=jellyfin)"
 echo "  3. Run: bash scripts/health-check.sh"
 echo "  4. Follow the rest of SETUP.md for Plex + app configuration"
 echo ""