containers/emerald: bind music media dir

containers/emerald/configuration.nix

@@ -1,7 +1,6 @@
 { fqdn, shareFqdn, ... }: {
   system.stateVersion = "25.11";
   systemd.tmpfiles.rules = [
-    "d /persist/music 755 navidrome navidrome"
     "d /persist/navidrome 755 navidrome navidrome"
   ];
   networking.firewall.allowedTCPPorts = [ 4533 ];
@@ -17,7 +16,7 @@
       ShareURL = "https://${shareFqdn}";
       EnableSharing = true;
       DataFolder = "/persist/navidrome";
-      MusicFolder = "/persist/music";
+      MusicFolder = "/binds/music";
     };
   };
 }

containers/emerald/flake.nix

@@ -67,6 +67,11 @@
           mountPoint = "/persist";
           isReadOnly = false;
         };
+        bindMounts."music" = {
+          hostPath = "/persist/media/music";
+          mountPoint = "/binds/music";
+          isReadOnly = true;
+        };
         bindMounts."navidrome_env" = {
           hostPath = config.age.secrets.navidrome_env.path;
           mountPoint = "/binds/navidrome_env";

containers/fluorite/flake.nix

@@ -33,6 +33,7 @@
         enableIPv6 = true;
         internalInterfaces = [ "ve-${name}" ];
       };
+      networking.firewall.allowedTCPPorts = [ 50300 ];
 
       services.nginx.virtualHosts."${fqdn}" = {
         useACMEHost = "lava.moe";
@@ -58,6 +59,14 @@
         config = { imports = modules; };
         specialArgs = { inherit fqdn; };
 
+        forwardPorts = [
+          {
+            containerPort = 50300;
+            hostPort = 50300;
+            protocol = "tcp";
+          }
+        ];
+
         bindMounts."persist" = {
           hostPath = "/persist/containers/${name}";
           mountPoint = "/persist";