feat(tanzanite): navidrome

Yay, second try at getting music streaming to work. This time imma be a
bit more concious about how I'm doing it.

hosts/tanzanite/default.nix

@@ -100,6 +100,21 @@ in {
           deny all;
         '';
       };
+      "music.stitchy.moe" = {
+        enableACME = true;
+        forceSSL = true;
+        locations."/" = {
+          proxyPass = "http://127.0.0.1:${toString config.services.navidrome.settings.Port}";
+          proxyWebsockets = true;
+          recommendedProxySettings = true;
+        };
+        extraConfig = ''
+          allow 10.100.0.0/24;
+          allow 192.168.51.2;
+          allow 192.168.51.1;
+          deny all;
+        '';
+      };
     };
   };
 
@@ -161,6 +176,12 @@ in {
     };
     unpoller = {
     };
+    navidrome = {
+      enable = true;
+      settings = {
+        MusicFolder = "/opt/services/navidrome";
+      };
+    };
   };
 
   networking.firewall = {