diff --git a/containers/jellyfin.nix b/containers/jellyfin.nix
index a9999e7..1aa3d0d 100644
--- a/containers/jellyfin.nix
+++ b/containers/jellyfin.nix
@@ -26,6 +26,7 @@
               system.nssModules = lib.mkForce [ ];
 
               services.jellyfin.enable = true;
+              services.jellyfin.openFirewall = true;
             };
           service.ports = [ "8096:8096" ];
         };
diff --git a/hosts/main-homelab/configuration.nix b/hosts/main-homelab/configuration.nix
index d37b5c8..03708c0 100644
--- a/hosts/main-homelab/configuration.nix
+++ b/hosts/main-homelab/configuration.nix
@@ -40,10 +40,16 @@
 
   networking.networkmanager.enable = true;
 
+  virtualisation.docker.enable = false;
+  virtualisation.podman.enable = true;
+  virtualisation.podman.dockerSocket.enable = true;
+  virtualisation.podman.defaultNetwork.dnsname.enable = true;
   virtualisation.arion = {
     backend = "podman-socket";
   };
 
+  users.extraUsers.veneficium.extraGroups = [ "podman" ];
+
   environment.systemPackages = with pkgs; [
     nano
     lshw
@@ -53,6 +59,8 @@
     pass-wayland
     git
     google-authenticator
+    arion
+    docker-client
   ];
 
   programs.zsh.enable = true;