{ ... }:
{
  fileSystems."/mnt/media" = {
    device = "//10.202.46.5/media";
    fsType = "cifs";
    options = [ 
      "username=jellyfin" 
      "credentials=/run/secrets/samba-credentials"
      "iocharset=utf8"
      "vers=3.1.1"
      "uid=jellyfin"
      "gid=jellyfin"
      "_netdev"
    ];
  };

  sops.secrets."samba-credentials" = {
    mode = "0440";
    owner = "root";
    group = "root";
  };
}