diff --git a/nixos/hosts/eidola/mounts.nix b/nixos/hosts/eidola/mounts.nix
index 9485d86..6a5b47e 100644
--- a/nixos/hosts/eidola/mounts.nix
+++ b/nixos/hosts/eidola/mounts.nix
@@ -17,7 +17,7 @@ _: {
       "/var/lib/jellyfin"
       "/var/cache/jellyfin"
 
-      "/var/lib/bitwarden_rs"
+      "/var/lib/navidrome"
     ];
     files = [
       "/etc/machine-id"
diff --git a/nixos/hosts/eidola/services/default.nix b/nixos/hosts/eidola/services/default.nix
index 7722bf4..56638f5 100644
--- a/nixos/hosts/eidola/services/default.nix
+++ b/nixos/hosts/eidola/services/default.nix
@@ -2,5 +2,6 @@
   imports = [
     ./jellyfin.nix
     ./samba.nix
+    ./navidrome.nix
   ];
 }
diff --git a/nixos/hosts/eidola/services/jellyfin.nix b/nixos/hosts/eidola/services/jellyfin.nix
index a7d0adb..b6e9c01 100644
--- a/nixos/hosts/eidola/services/jellyfin.nix
+++ b/nixos/hosts/eidola/services/jellyfin.nix
@@ -1,8 +1,10 @@
 _: {
   services.jellyfin = {
     enable = true;
+  };
 
-    # allow it to access network shares
-    group = "share";
+  # allow it to access network shares
+  systemd.services.jellyfin = {
+    serviceConfig.SupplementaryGroups = ["share"];
   };
 }
diff --git a/nixos/hosts/eidola/services/navidrome.nix b/nixos/hosts/eidola/services/navidrome.nix
new file mode 100644
index 0000000..64997e7
--- /dev/null
+++ b/nixos/hosts/eidola/services/navidrome.nix
@@ -0,0 +1,28 @@
+_: {
+  services.navidrome = {
+    enable = true;
+
+    # ideally i would be able to specify values from a file so i can use secrets,
+    # but i cant. oh well
+    settings = {
+      Address = "10.13.1.1";
+      Port = 4533;
+
+      BaseUrl = "https://aux.min.rip";
+      MusicFolder = "/terra/terrarium/Media/Music"; # TODO: hardcoding
+
+      EnableInsightsCollector = false;
+      EnableExternalServices = false;
+
+      EnableSharing = true;
+
+      DefaultTheme = "Catppuccin Macchiato";
+      UIWelcomeMessage = "hiiii";
+    };
+  };
+
+  # allow access to network shares
+  systemd.services.navidrome = {
+    serviceConfig.SupplementaryGroups = ["share"];
+  };
+}
diff --git a/nixos/hosts/silver/services/default.nix b/nixos/hosts/silver/services/default.nix
index 053ac09..e060fda 100644
--- a/nixos/hosts/silver/services/default.nix
+++ b/nixos/hosts/silver/services/default.nix
@@ -12,6 +12,7 @@
     ./vaultwarden.nix
     ./shim-jellyfin.nix
     ./wireguard.nix
+    ./shim-navidrome.nix
   ];
 
   security.acme = {
diff --git a/nixos/hosts/silver/services/shim-navidrome.nix b/nixos/hosts/silver/services/shim-navidrome.nix
new file mode 100644
index 0000000..55547e9
--- /dev/null
+++ b/nixos/hosts/silver/services/shim-navidrome.nix
@@ -0,0 +1,14 @@
+_: let
+  httpIntAddr = "10.13.1.1";
+  httpIntPort = 4533;
+  dom = "aux.min.rip";
+in {
+  services.nginx.virtualHosts.${dom} = {
+    forceSSL = true;
+    enableACME = true;
+
+    locations."/" = {
+      proxyPass = "http://${httpIntAddr}:${toString httpIntPort}";
+    };
+  };
+}