From dcd2c4c4d71161301a956b7e4777b499f5010e74 Mon Sep 17 00:00:00 2001
From: Isabella Bastaja <isabella@sorre.xyz>
Date: Tue, 18 Aug 2026 20:07:35 +0200
Subject: tower: init

---
 hosts/tower/web/navidrome.nix | 46 +++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)
 create mode 100644 hosts/tower/web/navidrome.nix

(limited to 'hosts/tower/web/navidrome.nix')

diff --git a/hosts/tower/web/navidrome.nix b/hosts/tower/web/navidrome.nix
new file mode 100644
index 0000000..70d2779
--- /dev/null
+++ b/hosts/tower/web/navidrome.nix
@@ -0,0 +1,46 @@
+{ config, ... }:
+let
+  cfg = config.services.navidrome;
+  # secrets = config.sops.secrets;
+  domain = "music.sorre.internal";
+in
+{
+  services.navidrome = {
+    enable = false;
+    settings = {
+      MusicFolder = "/var/navidrome/music";
+      DataFolder = "/var/navidrome/data";
+      BaseUrl = "https://${domain}";
+      Port = 4533;
+      Address = "127.0.0.1";
+      openFirewall = false;
+    };
+  };
+
+  services.nginx = {
+    enable = true;
+
+    virtualHosts."navidrome" = {
+      serverName = domain;
+      # forceSSL = true;
+      listen = [
+        {
+          addr = "100.64.0.3";
+          port = 443;
+          # ssl = true;
+        }
+      ];
+
+      # sslCertificateKey = secrets."wg-ca-key".path;
+      # sslCertificate = secrets."wg-ca-crt".path;
+
+      locations."/" = {
+        proxyPass = "http://127.0.0.1:${toString cfg.settings.Port}";
+        recommendedProxySettings = true;
+        extraConfig = ''
+          proxy_buffering off;
+        '';
+      };
+    };
+  };
+}
-- 
cgit v1.3.1