diff --git a/nixos/hosts/eidola/services/navidrome.nix b/nixos/hosts/eidola/services/navidrome.nix
index 3504df4..60172a9 100644
--- a/nixos/hosts/eidola/services/navidrome.nix
+++ b/nixos/hosts/eidola/services/navidrome.nix
@@ -1,6 +1,9 @@
-_: {
+{config, ...}: {
+  sops.secrets."svc-navidrome-env" = {};
+
   services.navidrome = {
     enable = true;
+    environmentFile = config.sops.secrets."svc-navidrome-env".path;
 
     # ideally i would be able to specify values from a file so i can use secrets,
     # but i cant. oh well
@@ -21,6 +24,8 @@ _: {
       ListenBrainz.Enabled = true;
       ListenBrainz.BaseURL = "https://fm.min.rip/apis/listenbrainz/1/";
 
+      LastFM.Enabled = true;
+
       DefaultTheme = "Catppuccin Macchiato";
       UIWelcomeMessage = "hiiii";
     };
diff --git a/secrets/eidola/default.yaml b/secrets/eidola/default.yaml
index 0eead77..499a512 100644
--- a/secrets/eidola/default.yaml
+++ b/secrets/eidola/default.yaml
@@ -4,7 +4,8 @@ nebula-key: ENC[AES256_GCM,data:ult/inutRoz/MBJxlUlPqdiDn41OUvByDaedSPiPIM0ZIq5N
 terra-key: ENC[AES256_GCM,data:pQRlvltiRr83ndfSjX/I8n1WekS9jY2K1QyLTTcYn14TRupRVgvX47rsus1QA9QAbpT/9f0ZYld3aCrR5J0rxg==,iv:mkiu/+uLKOHG9gDjv72T7JGz6/3oaimDawAOqGs3Koo=,tag:c9Ubj3i5rDj5vaLBRpAUkQ==,type:str]
 wireguard-key: ENC[AES256_GCM,data:aM76YT/0gbfw87x3ThrwFMuf9DxC0IJ5aCeEFDtL+JWPGsZk3XtrN+kxW6w=,iv:ssh+sGPxMU55ubNZlWcWh+3fXvhjhJ6cNJhPZJVXEyw=,tag:2PdoFb2CyeTkV0EKfcpZiQ==,type:str]
 wireguard-psk: ENC[AES256_GCM,data:fEDfzuZVvEC8/HHbV4k0fSZHucRk3PLc/jaf/wl5Np+4OB1SiK6VnSyoW2o=,iv:2QnunJjHxt8V/DBG2KAuzwGQsJnmrspj6x01ufiJteY=,tag:teEVG+TuRg+QsY4jMg2DzQ==,type:str]
-svc-maloja-env: ENC[AES256_GCM,data:xSxDUpzP9SphPVvuXV3HagWwDhdPAnQilP4LMlKc+Nxh7nuO1vSGAFUOh/RETcNgi9Csf2300BewaEHWRf6qXPFvp/c4najv4DUbpnjicFvooMfI0KcsDZI8x+fU0zhfmtZrMyLZ/st1TSd8ezryG6PKqVS3DX3DGYb6165v/myWDGQnn5RJkZttR+cXRQz1QZg/JgYewRrvlL84NCwymY74IuZKgsbipHUzX4oHA+YXrKkDQol5Em1h15M8Q7D+sG2n/3yruU9YXTUeMwbOsoKStxBnkdh9Mh0DxYmxrDChFlYq8H4hWAqXGgwl+c/C3uzbjC/xHsJs,iv:ZdHuzEtKi4Jb1+3Z76GxIwh1nDo5P5XDcoJzFnwsDqA=,tag:o+ZKwgTylE+dWgWwFJ3k4g==,type:str]
+svc-maloja-env: ENC[AES256_GCM,data:8D/QqT46nqMtRmZWIIk+ur8y8+HCU0i1MFwIbL1JaY4X0eWoDlh3qlI9bh5yioBCKBskYRf1o4nn8+JD6Exyk8Dx9SHvgTfL1MhUwuL9oRNhfR30bRJVHExrzhqTAzrDS5pxtomTGnJDQbEZ2/ZS0s3SMUrvcjllHMmuMBLD4u2rV3Vhp+viaj9UNft4WcY6T3Mgnoj6fugn7dx+Vv7g8EIYIpH0p7AlUkdm1IKxq3Kch3q7JXCDiRfoAoOixzEmP2DcA/rj0IDGfUgXRox0S7lmn7Zc6qjsuxgYEmn5wgR0ULVaIHEHucJHWMyvwBxCyiJ8HBYN1OhjhQ==,iv:0l5hjxV33K7LLPzYErNAf+fLx1y8f1OmhhJzvBMIriE=,tag:jso0Eb30vF1YtP63+R6O3A==,type:str]
+svc-navidrome-env: ENC[AES256_GCM,data:qtSQh7a/VrehZeKw1TR0HlqoRbqlmbLLgSQbTr6/CN/9h6yIu2IoLuJeYGwXvbAYpuz8E6Bk+IAwpNvdkobnDim4qtdSoOkemPhl2/1xRnz7O2NsLNaCNqQSmrnTAZq+MmAc,iv:qFIml9Y6Dg3yn6zqZE4LtujV1VJD6OcSe1XUT7OHUNo=,tag:NwvexnegRN+bLBT+ahIRBA==,type:str]
 sops:
     age:
         - recipient: age1yubikey1qg5k0y844v5e79uwax3r00u7zdljwnjlrmwvdr3st9m5a3ra5098qy0sjdj
@@ -35,7 +36,7 @@ sops:
             eWRoSXlMamNjTHVaenpMR3dEOXNuWDAKSmbC+fGeKYcKy0eQdWPVVMpyBVYtogur
             A0fYIBLXi+HMN+/7LXFb80vSnXN3v42KGQ/tzsWJo0ed3Q16wJ4eUA==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-01-24T00:34:58Z"
-    mac: ENC[AES256_GCM,data:g/t+H+GpBRNN8NeWwRdoxVXkprkk9JWdPOE887XKfaaupenxE1jyFXs3j4g69Vyg0+FvNZoodDveks9VQJdEOhfTRe+ln4bC4rA8HeRc93pNcs1pdduowzyHIKzvMZf8x9Vc3s6U6VnOjJH7aGWkKXJKcwX3CAsG0h2o158XwX8=,iv:CV/sgtRtfbVUF1N3mEsKeIDFRVbJbT70HHi2wPdvrCo=,tag:mRy83EbR0A5SOr/LxDwedg==,type:str]
+    lastmodified: "2026-01-31T09:42:16Z"
+    mac: ENC[AES256_GCM,data:8rgg4EU1EtrGajxCQbUF+OjB+uN3gA+Ag7ZUTnvAlU/f8XLwwSnqm5UL8bSh6babgGX+tnYVhxuaYUI8etZWWTZpbYxxPse3EqXkwrolGblklW1kHsE2GssITZUHeLZZDzOXHHjIw0MeAhamkvAOoegDvxn/PAXFR7OGG6E1r2I=,iv:3KB49JbuJAhKr+9kO2ebqQ1z3oVHnmjXA1n0Bl9ncfY=,tag:sySDByUip+a7nDfy8YvdCQ==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0