diff --git a/host_vars/xps/vpn.yml b/host_vars/xps/vpn.yml
index 5d4c0ac..22822fd 100644
--- a/host_vars/xps/vpn.yml
+++ b/host_vars/xps/vpn.yml
@@ -1,3 +1,6 @@
+pa_dlna_version: 0.16
+pa_dlna_systemd_version: 0.0.9
+
 vpn_default:
   ip: 10.0.0.2
   prefix: 24
diff --git a/tasks/personal/xps.yml b/tasks/personal/xps.yml
index 10b48b2..b1eb784 100644
--- a/tasks/personal/xps.yml
+++ b/tasks/personal/xps.yml
@@ -1,9 +1,50 @@
 - name: Provision powertop systemd service
   become: true
   ansible.builtin.template:
-    src: 'templates/personal/xps/powertop.service.j2'
-    dest: '/etc/systemd/system/powertop.service'
+    src: templates/personal/xps/powertop.service.j2
+    dest: /etc/systemd/system/powertop.service
     owner: root
     group: root
     mode: '0644'
   notify: restart powertop
+
+- name: Provision python pa-dlna
+  block:
+    - name: Create configuration directory
+      ansible.builtin.file:
+        path: '{{ xdg_config_dir }}/pa-dlna'
+        state: directory
+        mode: '0755'
+
+    - name: Copy configuration file
+      ansible.builtin.template:
+        src: templates/personal/xps/pa-dlna/config.j2
+        dest: '{{ xdg_config_dir }}/pa-dlna/pa-dlna.conf'
+        mode: '0755'
+
+    - name: Copy systemd service
+      ansible.builtin.template:
+        src: templates/personal/xps/pa-dlna/service.j2
+        dest: '{{ xdg_config_dir }}/systemd/user/pa-dlna.service'
+        mode: '0755'
+
+    - name: Create virtualenv directory
+      become: true
+      ansible.builtin.file:
+        path: /opt/virtualenv/pa-dlna
+        state: directory
+        owner: sonny
+        group: sonny
+        mode: '0755'
+
+    - name: Install pa-dlna
+      ansible.builtin.pip:
+        name: 'pa-dlna=={{ pa_dlna_version }}'
+        virtualenv: /opt/virtualenv/pa-dlna
+        virtualenv_command: python3.13 -m venv
+
+    - name: Install python-systemd
+      ansible.builtin.pip:
+        name: 'python-systemd=={{ pa_dlna_systemd_version }}'
+        virtualenv: /opt/virtualenv/pa-dlna
+        virtualenv_command: python3.13 -m venv
diff --git a/templates/personal/xps/nftables.j2 b/templates/personal/xps/nftables.j2
index b54a534..5140777 100644
--- a/templates/personal/xps/nftables.j2
+++ b/templates/personal/xps/nftables.j2
@@ -23,6 +23,9 @@ table inet filter {
     # allow ssh
     tcp dport ssh accept
 
+    ip saddr 192.168.2.11 tcp dport 8080 accept comment "HTTP pa-dlna server"
+    ip saddr 192.168.2.11 udp dport 1900 accept comment "UPnP"
+
     # syncthing
     ip saddr 10.0.0.1 tcp dport 22000 accept
   }
diff --git a/templates/personal/xps/pa-dlna/config.j2 b/templates/personal/xps/pa-dlna/config.j2
new file mode 100644
index 0000000..865a203
--- /dev/null
+++ b/templates/personal/xps/pa-dlna/config.j2
@@ -0,0 +1,26 @@
+# {{ ansible_managed }}
+#
+# This is the built-in pa-dlna configuration written as text. It can be
+# parsed by a Python Configuration parser and consists of sections, each led
+# by a [section] header, followed by option/value entries separated by
+# '='. See https://docs.python.org/3/library/configparser.html.
+#
+# The 'selection' option is written as a multi-line in which case all the
+# lines after the first line start with a white space.
+#
+# The default value of 'selection' lists the encoders in this order:
+#     - mp3 encoders first as mp3 is the most common encoding
+#     - lossless encoders
+#     - then lossy encoders
+# See https://trac.ffmpeg.org/wiki/Encode/HighQualityAudio.
+
+[DEFAULT]
+selection =
+    FFMpegFlacEncoder,
+    FFMpegOpusEncoder,
+sample_format = s24be
+rate = 96000
+channels = 2
+track_metadata = yes
+soap_minimum_interval = 5
+args = None
diff --git a/templates/personal/xps/pa-dlna/service.j2 b/templates/personal/xps/pa-dlna/service.j2
new file mode 100644
index 0000000..feef6f1
--- /dev/null
+++ b/templates/personal/xps/pa-dlna/service.j2
@@ -0,0 +1,40 @@
+# {{ ansible_managed }}
+#
+# When enabled, the pa-dlna service unit is started automatically after the
+# pulseaudio or pipewire service unit is started. It will also stop when the
+# pulseaudio or pipewire service unit stops. However it will stop when the
+# pulseaudio or pipewire service unit is restarted but it will not start.
+#
+# Both pa-dlna and pulseaudio service units are of 'Type=notify'. This means
+# that pa-dlna will only start after pulseaudio has notified systemd that it
+# is ready and pa-dlna may connect successfully to libpulse.
+#
+# However the pipewire service unit is of 'Type=simple'. In that case and if
+# pa-dlna fails to start with the error:
+#       LibPulseStateError(('PA_CONTEXT_FAILED', 'Connection refused'))
+# add a delay to the pa-dlna start up sequence with the directive:
+#       ExecStartPre=/bin/sleep 1
+#
+# Any pa-dlna option may be added to the 'ExecStart' directive, for example to
+# restrict the allowed NICs or IP addresses (recommended) or to change the
+# log level.
+# The '--systemd' option is required.
+#
+# The 'python-systemd' package is required.
+
+[Unit]
+Description=Pa-dlna Service
+Documentation=https://pa-dlna.readthedocs.io/en/stable/
+
+After=pipewire-session-manager.service
+
+[Service]
+Type=simple
+ExecStart=/opt/virtualenv/pa-dlna/bin/pa-dlna
+Slice=session.slice
+
+NoNewPrivileges=yes
+UMask=0077
+
+[Install]
+WantedBy=pipewire-session-manager.service