+3 -3

flake.lock

··· 77 77 ] 78 78 }, 79 79 "locked": { 80 80 - "lastModified": 1770023713, 81 81 - "narHash": "sha256-NG6ZUO2vitvN9UiobcCNwEOWeQe3gunnFVF6t0rZx9k=", 80 80 + "lastModified": 1771964110, 81 81 + "narHash": "sha256-jKF/KIJaN7kJolXB1Y0mn9TAGIHu0ALleM4kgx862ac=", 82 82 "owner": "encode42", 83 83 "repo": "nixos-packages", 84 84 - "rev": "8f4c9823fdb7ae1bb1ae823f414248432e7830a5", 84 84 + "rev": "ccd740573d1835c26ddadbc80d6fdf1119138268", 85 85 "type": "github" 86 86 }, 87 87 "original": {

+5 -1

hosts/index/config/media/navidrome.nix

··· 1 1 { flakeRoot, config, ... }: 2 2 3 3 let 4 4 + host = "hear.encrypted.group"; 5 5 + 4 6 navidromeModule = import (flakeRoot + /packages/server/media/navidrome.nix) { 5 7 hosts = [ 6 8 { ··· 8 10 ssl = "internal"; 9 11 } 10 12 { 11 11 - name = "hear.encrypted.group"; 13 13 + name = host; 12 14 ssl = "cloudflare"; 13 15 14 16 useLocal = true; ··· 25 27 26 28 services.navidrome = { 27 29 settings = { 30 30 + BaseURL = "https://${host}"; 31 31 + 28 32 DataFolder = "/mnt/apps/navidrome"; 29 33 MusicFolder = "/mnt/data/media/Music"; 30 34 };

+6 -3

packages/server/media/navidrome.nix

··· 5 5 { 6 6 config, 7 7 flakeLib, 8 8 - pkgs-unstable, 8 8 + pkgs-personal, 9 9 + lib, 9 10 ... 10 11 }: 11 12 ··· 16 17 services.navidrome = { 17 18 enable = true; 18 19 19 19 - # Unstable until #481611 is closed 20 20 - package = pkgs-unstable.navidrome; 20 20 + # Unstable until #488091 is merged 21 21 + package = pkgs-personal.navidrome; 21 22 22 23 settings = { 23 24 Address = "unix:${socket}"; ··· 67 68 TranscodingCacheSize = "8GB"; 68 69 }; 69 70 }; 71 71 + 72 72 + systemd.services.navidrome.serviceConfig.MemoryDenyWriteExecute = lib.mkForce false; 70 73 71 74 # Caddy reverse proxy configuration 72 75 users.users.caddy.extraGroups = [ config.users.users.navidrome.group ];