From 7d479007d99fb7b790e52158d1d07f7bb43c7e0f Mon Sep 17 00:00:00 2001
From: Cilly Leang <mini@cilly.moe>
Date: Wed, 18 Mar 2026 03:08:18 +1100
Subject: [PATCH] containers/emerald: add navidrome env for lastfm and spotify

---
 containers/emerald/configuration.nix |   1 +
 containers/emerald/flake.nix         |   7 ++++++-
 hosts/dandelion/default.nix          |   1 +
 secrets.nix                          |   1 +
 secrets/navidrome_env.age            | Bin 0 -> 630 bytes
 5 files changed, 9 insertions(+), 1 deletion(-)
 create mode 100644 secrets/navidrome_env.age

diff --git a/containers/emerald/configuration.nix b/containers/emerald/configuration.nix
index 68b06fa..e3f8c57 100644
--- a/containers/emerald/configuration.nix
+++ b/containers/emerald/configuration.nix
@@ -9,6 +9,7 @@
 
   services.navidrome = {
     enable = true;
+    environmentFile = "/binds/navidrome_env";
     settings = {
       Port = 4533;
       Address = "[::]";
diff --git a/containers/emerald/flake.nix b/containers/emerald/flake.nix
index d8578fc..80f6dac 100644
--- a/containers/emerald/flake.nix
+++ b/containers/emerald/flake.nix
@@ -24,7 +24,7 @@
     nixosConfigurations.container = nixpkgs.lib.nixosSystem {
       inherit modules;
     };
-    nixosModule = { ... }: {
+    nixosModule = { config, ... }: {
       networking.nat = {
         enable = true;
         enableIPv6 = true;
@@ -63,6 +63,11 @@
           mountPoint = "/persist";
           isReadOnly = false;
         };
+        bindMounts."navidrome_env" = {
+          hostPath = config.age.secrets.navidrome_env.path;
+          mountPoint = "/binds/navidrome_env";
+          isReadOnly = true;
+        };
         # flake = "path:" + ./.;
       };
     };
diff --git a/hosts/dandelion/default.nix b/hosts/dandelion/default.nix
index 5174cc7..58a0b80 100644
--- a/hosts/dandelion/default.nix
+++ b/hosts/dandelion/default.nix
@@ -5,6 +5,7 @@
 
   age.secrets = {
     acme_dns.file = ../../secrets/acme_dns.age;
+    navidrome_env.file = ../../secrets/navidrome_env.age;
     wg_dandelion.file = ../../secrets/wg_dandelion.age;
   };
 
diff --git a/secrets.nix b/secrets.nix
index bab8c08..b2d0d0e 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -10,6 +10,7 @@ in {
   "secrets/wpa_conf.age".publicKeys = [ blossom rin ];
 
   "secrets/acme_dns.age".publicKeys = [ dandelion hazel rin ];
+  "secrets/navidrome_env.age".publicKeys = [ anemone dandelion rin ];
   "secrets/slskd_env.age".publicKeys = [ anemone dandelion rin ];
   "secrets/warden_admin.age".publicKeys = [ rin ];
   "secrets/wg_anemone.age".publicKeys = [ anemone rin ];
diff --git a/secrets/navidrome_env.age b/secrets/navidrome_env.age
new file mode 100644
index 0000000000000000000000000000000000000000..6cb705c5d12523d7e403ecd2736ad062cc9756fe
GIT binary patch
literal 630
zcmYdHPt{G$OD?J`D9Oyv)5|YP*Do{V(zR14F3!+RO))YxHMCU7&!`M8aa0KO_ASdR
zFLTZ>%y$h5$PW$)&5rUbP7e*q4s<UJNC|XF3UYTd4^H#;@Z?G=4h*vl_0<p0O$v!D
z&&n#yiSl+f&T?}q3{Q#*4a$owiVUl;4Dl&ROh>mZDafrbHBiAa)H6IN(b3VUqQE8D
zJu<a4LtEd~DbiEBvZTbYGRQQ{!zsKpry{$|Bb3Xq&@HpbG{v_n+%+}1EJr)h(JLj_
zz`&=d)IG4g)HFFcH8{h_!aY2x(gNMKP)oOnoOFfURPC|~k37%P3a=zj7k?KgZ%fCb
zu%zUW0N;p|JP*GR!?M(@DodBLOkb{0XKzn8?WCY^{UDdfB=Z!%K#$PEQm@3&vZ^r4
zpvcl3!^m`}WT$MG)JQH}U0nsA($w&*#42-xe0>+M@Qje`NQ>}_d=sy<LKnx}5_hAZ
zN?((_Ok<16@IbC@(LUxS5$;k2TVAzE<Q4{3Og7E=eeitITjdjnd2;>J?5%V2Uq65L
z+%<;phGojs^_|)w>B1*=GYG5O{FhSYc|85sgEfVx`CMb&g!c#RihTWeN3K4PDX&4q
z$6eR<-+OGC7ZG|QH2?J9KlYb2+YK(<Jlzw<<Y}~Y{e`#ZQzmXn*u24M{*8vN3Fpsz
zdv@o#LF>Ioc^_-jfBY|AI7{w~uH)nq>3`2e+Ahq{p0N0X#+Kysg;R~<+l4#%FEQmc
ypShYQ9`#3<#qYo0^Z5PR3}2s1-?BZQ`hJCU{jaarEM`=4rt5r7N!FRuR0RN&X85cC

literal 0
HcmV?d00001