diff --git a/modules/server/containers/apps/jellyfin.nix b/modules/server/containers/apps/jellyfin.nix
index 4b4fabf..a9b9fd8 100644
--- a/modules/server/containers/apps/jellyfin.nix
+++ b/modules/server/containers/apps/jellyfin.nix
@@ -1,10 +1,18 @@
 { config, containerCfg, pkgs, lib, builder, name, ... }:
 let
   serverCfg = config.syscfg.server;
-  image = pkgs.dockerTools.streamLayeredImage { # pkgs.dockerTools.buildImage{#
+  nss = pkgs.fakeNss.override {
+    extraPassthruLines = [
+      "jellyfin:x:1000:1000:Jellyfin Daemon:/var/lib/jellyfin:/bin/false"
+    ];
+    extraGroupLines = [
+      "jellyfin:x:1000:"
+    ];
+  };
+  image = pkgs.dockerTools.buildImage{#pkgs.dockerTools.streamLayeredImage { # 
     name = pkgs.jellyfin.name;
     tag = pkgs.jellyfin.version;  
-    contents = [ pkgs.cacert ];
+    contents = [ pkgs.cacert nss ];
     config = {
       User = "1000:1000"; 
       Entrypoint = [ "${pkgs.jellyfin}/bin/jellyfin" ];
@@ -40,13 +48,12 @@ in {
   containers = {
     server = builder.mkContainer {
       subdomain = containerCfg.subdomain;
-      imageStream = image;
-      # imageFile = image;
+      #imageStream = image;
+      imageFile = image;
       port = 8096;
       extraEnv = {
         HOME = "/config/data";
         DOTNET_SYSTEM_GLOBALIZATION_INVARIANT = "1";
-        JELLYFIN_WEB_DIR = "${pkgs.jellyfin-web}/share/jellyfin-web";
         JELLYFIN_HttpListenerHost__BindAddress= "0.0.0.0"; #we can use settings.xml override
         JELLYFIN_ServerName = if containerCfg.extra?name then containerCfg.extra.name else "Flix";
       };