feat: add navidrome

Signed-off-by: Lander Van den Bulcke <landervandenbulcke@gmail.com>

hosts/servers/hosting-02.nix

@@ -58,6 +58,7 @@
     name = "storage";
     gid = 491729;
     members = [
+      config.services.navidrome.user
       "slskd"
       "wrtagweb"
       "bandcamp-collection-downloader"
@@ -82,11 +83,27 @@
     };
   };
 
+  services.navidrome = {
+    enable = true;
+    settings = {
+      BaseUrl = "https://music.escapeangle.com";
+      MusicFolder = "/data/music";
+      DataFolder = "/data/navidrome";
+      EnableInsightsCollector = false;
+      AutoTranscodeDownload = true;
+      EnableGravatar = true;
+      EnableTranscodingConfig = true;
+      FFmpegPath = pkgs.ffmpeg;
+      IgnoredArticles = "The El La Los Las Le Les Os As O A De";
+    };
+    environmentFile = config.sops.secrets.navidromeSecrets.path;
+  };
+
   services.nginx.virtualHosts."music.escapeangle.com" = {
     forceSSL = true;
     enableACME = true;
     locations."/" = {
-      proxyPass = "http://localhost:4747";
+      proxyPass = "http://localhost:${toString config.services.navidrome.settings.Port}";
       proxyWebsockets = true;
     };
   };
@@ -130,6 +147,9 @@
       slskdEnvFile = {
         owner = config.services.slskd.user;
       };
+      navidromeSecrets = {
+        owner = config.services.navidrome.user;
+      };
       wrtagwebConfigFile = {
         owner = "wrtagweb";
       };