Navidrome + fix #22

nixos/hosts/eidola/mounts.nix

@@ -17,7 +17,7 @@ _: {
       "/var/lib/jellyfin"
       "/var/cache/jellyfin"
 
-      "/var/lib/bitwarden_rs"
+      "/var/lib/navidrome"
     ];
     files = [
       "/etc/machine-id"

nixos/hosts/eidola/services/default.nix

@@ -2,5 +2,6 @@
   imports = [
     ./jellyfin.nix
     ./samba.nix
+    ./navidrome.nix
   ];
 }

nixos/hosts/eidola/services/jellyfin.nix

@@ -1,8 +1,10 @@
 _: {
   services.jellyfin = {
     enable = true;
+  };
 
   # allow it to access network shares
-    group = "share";
+  systemd.services.jellyfin = {
+    serviceConfig.SupplementaryGroups = ["share"];
   };
 }

nixos/hosts/eidola/services/navidrome.nix

@@ -0,0 +1,28 @@
+_: {
+  services.navidrome = {
+    enable = true;
+
+    # ideally i would be able to specify values from a file so i can use secrets,
+    # but i cant. oh well
+    settings = {
+      Address = "10.13.1.1";
+      Port = 4533;
+
+      BaseUrl = "https://aux.min.rip";
+      MusicFolder = "/terra/terrarium/Media/Music"; # TODO: hardcoding
+
+      EnableInsightsCollector = false;
+      EnableExternalServices = false;
+
+      EnableSharing = true;
+
+      DefaultTheme = "Catppuccin Macchiato";
+      UIWelcomeMessage = "hiiii";
+    };
+  };
+
+  # allow access to network shares
+  systemd.services.navidrome = {
+    serviceConfig.SupplementaryGroups = ["share"];
+  };
+}

nixos/hosts/silver/services/default.nix

@@ -12,6 +12,7 @@
     ./vaultwarden.nix
     ./shim-jellyfin.nix
     ./wireguard.nix
+    ./shim-navidrome.nix
   ];
 
   security.acme = {

nixos/hosts/silver/services/shim-navidrome.nix

@@ -0,0 +1,14 @@
+_: let
+  httpIntAddr = "10.13.1.1";
+  httpIntPort = 4533;
+  dom = "aux.min.rip";
+in {
+  services.nginx.virtualHosts.${dom} = {
+    forceSSL = true;
+    enableACME = true;
+
+    locations."/" = {
+      proxyPass = "http://${httpIntAddr}:${toString httpIntPort}";
+    };
+  };
+}