_: {
  services.navidrome = {
    enable = true;

    # ideally i would be able to specify values from a file so i can use secrets,
    # but i cant. oh well
    settings = {
      Address = "10.13.1.1";
      Port = 4533;

      BaseUrl = "https://aux.min.rip";
      MusicFolder = "/terra/terrarium/Media/Music"; # TODO: hardcoding

      EnableInsightsCollector = false;
      EnableExternalServices = false;

      EnableSharing = true;

      DefaultTheme = "Catppuccin Macchiato";
      UIWelcomeMessage = "hiiii";
    };
  };

  # allow access to network shares
  systemd.services.navidrome = {
    serviceConfig.SupplementaryGroups = ["share"];
  };
}