diff --git a/argocd/manifests/homepage/external-secret-jellyfin.yaml b/argocd/manifests/homepage/external-secret-jellyfin.yaml
new file mode 100644
index 0000000..0c365c3
--- /dev/null
+++ b/argocd/manifests/homepage/external-secret-jellyfin.yaml
@@ -0,0 +1,20 @@
+# ExternalSecret for Jellyfin API key
+# Used by Homepage Jellyfin widget
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: homepage-jellyfin
+  namespace: homepage
+spec:
+  refreshInterval: 1h
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: onepassword-blumeops
+  target:
+    name: homepage-jellyfin
+    creationPolicy: Owner
+  data:
+    - secretKey: apikey
+      remoteRef:
+        key: jellyfin
+        property: credential
diff --git a/argocd/manifests/homepage/values.yaml b/argocd/manifests/homepage/values.yaml
index 355118b..3088f85 100644
--- a/argocd/manifests/homepage/values.yaml
+++ b/argocd/manifests/homepage/values.yaml
@@ -32,6 +32,11 @@ env:
       secretKeyRef:
         name: homepage-openweathermap
         key: apikey
+  - name: HOMEPAGE_VAR_JELLYFIN_API_KEY
+    valueFrom:
+      secretKeyRef:
+        name: homepage-jellyfin
+        key: apikey
 
 config:
   # Host services (non-k8s, on indri or LAN)
@@ -77,6 +82,16 @@ config:
                   query: borgmatic_repo_deduplicated_size_bytes
                   format:
                     type: bytes
+        - Jellyfin:
+            href: https://jellyfin.ops.eblu.me
+            icon: jellyfin
+            description: Media server
+            widget:
+              type: jellyfin
+              url: https://jellyfin.ops.eblu.me
+              key: "{{HOMEPAGE_VAR_JELLYFIN_API_KEY}}"
+              enableBlocks: true
+              enableNowPlaying: true
 
   # External bookmarks
   bookmarks: