containers/emerald: add navidrome env for lastfm and spotify

containers/emerald/configuration.nix

@@ -9,6 +9,7 @@
 
   services.navidrome = {
     enable = true;
+    environmentFile = "/binds/navidrome_env";
     settings = {
       Port = 4533;
       Address = "[::]";

containers/emerald/flake.nix

@@ -24,7 +24,7 @@
     nixosConfigurations.container = nixpkgs.lib.nixosSystem {
       inherit modules;
     };
-    nixosModule = { ... }: {
+    nixosModule = { config, ... }: {
       networking.nat = {
         enable = true;
         enableIPv6 = true;
@@ -63,6 +63,11 @@
           mountPoint = "/persist";
           isReadOnly = false;
         };
+        bindMounts."navidrome_env" = {
+          hostPath = config.age.secrets.navidrome_env.path;
+          mountPoint = "/binds/navidrome_env";
+          isReadOnly = true;
+        };
         # flake = "path:" + ./.;
       };
     };

hosts/dandelion/default.nix

@@ -5,6 +5,7 @@
 
   age.secrets = {
     acme_dns.file = ../../secrets/acme_dns.age;
+    navidrome_env.file = ../../secrets/navidrome_env.age;
     wg_dandelion.file = ../../secrets/wg_dandelion.age;
   };
 

secrets.nix

@@ -10,6 +10,7 @@ in {
   "secrets/wpa_conf.age".publicKeys = [ blossom rin ];
 
   "secrets/acme_dns.age".publicKeys = [ dandelion hazel rin ];
+  "secrets/navidrome_env.age".publicKeys = [ anemone dandelion rin ];
   "secrets/slskd_env.age".publicKeys = [ anemone dandelion rin ];
   "secrets/warden_admin.age".publicKeys = [ rin ];
   "secrets/wg_anemone.age".publicKeys = [ anemone rin ];