From 9925c8fe4361ee849dfdad755c9fca5f274938d8 Mon Sep 17 00:00:00 2001
From: stitchy <stitchy@stitchy.moe>
Date: Sun, 16 Nov 2025 00:55:52 -0800
Subject: [PATCH] feat(tanzanite): navidrome

Yay, second try at getting music streaming to work. This time imma be a
bit more concious about how I'm doing it.
---
 hosts/tanzanite/default.nix | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/hosts/tanzanite/default.nix b/hosts/tanzanite/default.nix
index e24d5d0..42774af 100644
--- a/hosts/tanzanite/default.nix
+++ b/hosts/tanzanite/default.nix
@@ -100,6 +100,21 @@ in {
           deny all;
         '';
       };
+      "music.stitchy.moe" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:${toString config.services.navidrome.settings.Port}";
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+        };
+        extraConfig = ''
+          allow 10.100.0.0/24;
+          allow 192.168.51.2;
+          allow 192.168.51.1;
+          deny all;
+        '';
+      };
     };
   };
 
@@ -161,6 +176,12 @@ in {
     };
     unpoller = {
     };
+    navidrome = {
+      enable = true;
+      settings = {
+        MusicFolder = "/opt/services/navidrome";
+      };
+    };
   };
 
   networking.firewall = {