配置模板

unprivileged: 0
lxc.cgroup.devices.allow: a
lxc.cap.drop: 
lxc.cgroup2.devices.allow: c 226:0 rwm
lxc.cgroup2.devices.allow: c 226:128 rwm
lxc.mount.entry: /dev/dri/card0 dev/dri/card0 none bind,optional,create=file
lxc.mount.entry: /dev/dri/renderD128 dev/dri/renderD128 none bind,optional,create=file

在 选项 -> 功能 中勾选嵌套与 NFS

容器配置

version: "3"

services:
  emby:
    image: xinjiawei1/emby_unlockd
    container_name: emby
    network_mode: host
    restart: unless-stopped
    environment:
      - PUID=0
      - PGID=0
    volumes:
      - ./config:/config
      - media:/media
      - ./out:/cert
    devices:
      - /dev/dri:/dev/dri

volumes:
  media:
    driver_opts:
      type: "nfs"
      o: "addr=cloud.lan,nfsvers=4"
      device: ":/volume2/media"

证书配置

配置 cloudflare.ini

dns_cloudflare_api_token = xxxx

pacman -S certbot
certbot certonly --dns-cloudflare --dns-cloudflare-credentials cloudflare.ini -d your.domain
ln -s /etc/letsencrypt/live/your.domain certs
openssl pkcs12 -inkey certs/privkey.pem -in certs/fullchain.pem -export -out emby.pfx
mv emby.pfx out