dankserver: entropy read-only fleet-wide; jellyfin gets whole /mnt/entropy at /data

dankserver/jellyfin/quadlet/jellyfin.container

@@ -4,8 +4,8 @@
 # Unit name: jellyfin.service (podman 5.x drops the container- prefix)
 #
 # Data roots migrated from /opt/jellyfin to /home/dank/Containers/jellyfin at
-# cutover. The entropy volume is mounted read-only: nothing automated ever
-# writes there; copyparty is the only write path for /mnt/entropy. Every
+# cutover. All of /mnt/entropy is mounted read-only at /data: nothing automated
+# anywhere writes to the entropy volume. Every
 # creation-time environment variable of the compose-era container is kept as
 # an Environment= line (zero drift); none of them are secrets, so this unit
 # needs no EnvironmentFile.
@@ -41,8 +41,7 @@ PublishPort=7359:7359/udp
 PublishPort=1900:1900/udp
 Volume=/home/dank/Containers/jellyfin/config:/config
 Volume=/home/dank/Containers/jellyfin/cache:/cache
-Volume=/mnt/entropy/Movies:/data/movies:ro
-Volume=/mnt/entropy/TVShows:/data/shows:ro
+Volume=/mnt/entropy:/data:ro
 AddDevice=/dev/dri
 GroupAdd=keep-groups
 HealthCmd=curl -f http://localhost:8096/health