diff --git a/hosts/tanzanite/default.nix b/hosts/tanzanite/default.nix
index e24d5d0..42774af 100644
--- a/hosts/tanzanite/default.nix
+++ b/hosts/tanzanite/default.nix
@@ -100,6 +100,21 @@ in {
           deny all;
         '';
       };
+      "music.stitchy.moe" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:${toString config.services.navidrome.settings.Port}";
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+        };
+        extraConfig = ''
+          allow 10.100.0.0/24;
+          allow 192.168.51.2;
+          allow 192.168.51.1;
+          deny all;
+        '';
+      };
     };
   };
 
@@ -161,6 +176,12 @@ in {
     };
     unpoller = {
     };
+    navidrome = {
+      enable = true;
+      settings = {
+        MusicFolder = "/opt/services/navidrome";
+      };
+    };
   };
 
   networking.firewall = {