feat(bragi): add navidrome music server.

modules/servers/bragi/default.nix

@@ -3,5 +3,6 @@
     ./audiobookshelf.nix
     ./storage-box.nix
     ./secrets.nix
+    ./navidrome.nix
   ];
 }

modules/servers/bragi/navidrome.nix

@@ -0,0 +1,27 @@
+{config, ...}: {
+  services.navidrome = {
+    enable = true;
+    settings = {
+      MusicFolder = "/mnt/music";
+      BaseUrl = "https://nd.cronyakatsuki.xyz";
+    };
+    environmentFile = "${config.age.secrets.navidrome.path}";
+  };
+
+  services.traefik.dynamicConfigOptions.http = {
+    services.navidrome.loadBalancer.servers = [
+      {
+        url = "http://localhost:4533";
+      }
+    ];
+
+    routers.navidrome = {
+      rule = "Host(`nd.cronyakatsuki.xyz`)";
+      tls = {
+        certResolver = "porkbun";
+      };
+      service = "navidrome";
+      entrypoints = "websecure";
+    };
+  };
+}

modules/servers/bragi/secrets.nix

@@ -4,6 +4,9 @@
       rclone = {
         file = ../../../secrets/rclone.age;
       };
+      navidrome = {
+        file = ../../../secrets/navidrome.age;
+      };
     };
   };
 }

secrets/navidrome.age

@@ -0,0 +1,15 @@
+age-encryption.org/v1
+-> ssh-ed25519 2P4nKw jh3iW7BXz4PX/O4Q++pnGXzZJbAA7d9XfKBI2xUS/EQ
+OyrKTs51RL96wwaNv1rQ22dHYRfFUWSb7G4kVvXoZI4
+-> ssh-ed25519 6+hQpQ ZCcngqHkeBH1Y5iiVYXzfAAnjqzUWFzeRd6ARupY1hs
+CUU90fSXMjtlfbxYavUbf2IUX9keBmHKtFWo4SLvcK4
+-> ssh-ed25519 l/ODWA 1oBzN9ikgN3kyUbGMaXuM0g3dA7QDrdDlH3yXI1tkAA
+auxgQlS+pIWj7pOGMNQ83+VPZoc1v1c0OmUkiJqKIZI
+-> ssh-ed25519 7+5K3Q zfGye00AS0WcKkWQ2lKexMgZUKj1+vv8AAmb4WKE8gE
+//wFw0xl1bQmkz/XojLKDLikcpSbeMfeCYrWzGRXsmE
+-> ssh-ed25519 fd/ZLQ UPhW5kP13LgqdBQrWLjABVmk+Y5X6jxZA2kB6zHnPhA
+cqYELfcSyNCZ1tmCZ/aNgYFmoK9I6gtsmPthbImAJT0
+--- 9I9/f2mPgqMl2pBqJs1KojAkdkDji9g9E1G5YxhzxQQ
+¯á}¨þÐÎNN<4E>ƒ{!àdMIÒ<49><C392>?ê-ìN$ÈF9
®&ßd}Í}Hls&¬
+<EFBFBD>ýµdwB Zê§MŠ«ÁׇSu+Ivºc%Ï?-$x†W‡LZjó…‚D¥ÝF¼Ë¢¦„_×rÚÚcG1tû<74>‹´<-ÌáŒ*=Ý5µzc
+mO£ÏcfD½byÇeê®RÛN×Á¸{©`aƪф¤Ùk)Ó&¦K¯zêíô§ðÕý3årH	sרY;<3B>@‘ó@?¦L°à6B¾”Ò!õJ5²Wpcûiû#…ÀÛãkî@÷Cà6‘f3Ðr4áÐ)¢
ºð®<í

secrets/secrets.nix

@@ -17,4 +17,5 @@ in {
   "wg-heimdall.age".publicKeys = systems ++ users;
   "wg-desktop.age".publicKeys = systems ++ users;
   "rclone.age".publicKeys = systems ++ users;
+  "navidrome.age".publicKeys = systems ++ users;
 }