35e347d7

fix(jellyfin): repair terraform outputs + adguard split-DNS, unproxy record

Follow-ups to #317 found while applying terraform:
- outputs.tf still referenced cloudflare_dns_record.media (plan crashed)
- jellyfin record copied the proxied public-IP pattern; Cloudflare rejects
  proxied records with private targets (400 'Target not allowed') — set
  proxied=false, ttl=300 like every other internal record
- AdGuard was missing the jellyfin.dimensiondoor.xyz split-DNS rewrite that
  every other internal service has (auth, git, immich, ...), so the
  tailscale/LAN resolution path for the public name was dead

Agent Instructions

Each run corresponds to one flake attribute. Click a run for its logs and status.

Example: https://nix-ci.com/cb:ananjiani:infra/fix%2Fjellyfin-dns/35e347d7c4c616f39e025a17d60d3ecbfa8a8a5b/185b2504-ac63-4853-879e-3e017fd6f08e

Wait for suite to complete:

curl --netrc -N https://nix-ci.com/cb:ananjiani:infra/fix%2Fjellyfin-dns/35e347d7c4c616f39e025a17d60d3ecbfa8a8a5b/wait

This page is also available in machine-friendly formats. Request one with the Accept header:

• curl --netrc -H 'Accept: application/json' https://nix-ci.com/cb:ananjiani:infra/fix%2Fjellyfin-dns/35e347d7c4c616f39e025a17d60d3ecbfa8a8a5b
• curl --netrc -H 'Accept: text/markdown' https://nix-ci.com/cb:ananjiani:infra/fix%2Fjellyfin-dns/35e347d7c4c616f39e025a17d60d3ecbfa8a8a5b

For more instructions, fetch https://nix-ci.com/instructions .