fix(sunken-ship): move navidrome music folder to /srv/music — ProtectHome bypass 🎵

This commit is contained in:
DannyDannyDanny 2026-04-06 15:36:07 +02:00
parent c31ca7d473
commit 76f63f0ae3

View file

@ -80,17 +80,22 @@ in
}; };
# Navidrome — self-hosted music streaming server (Subsonic API). # Navidrome — self-hosted music streaming server (Subsonic API).
# Music library: /home/danny/music # Music library: /srv/music (bind-mounted from /home/danny/music).
# Web UI + Substreamer client on port 4533. # Web UI + Substreamer client on port 4533.
services.navidrome = { services.navidrome = {
enable = true; enable = true;
settings = { settings = {
Address = "0.0.0.0"; Address = "0.0.0.0";
Port = 4533; Port = 4533;
MusicFolder = "/home/danny/music"; MusicFolder = "/srv/music";
}; };
}; };
users.users.navidrome.extraGroups = [ "users" ];
# Persist the bind mount so navidrome can read music outside ProtectHome.
fileSystems."/srv/music" = {
device = "/home/danny/music";
options = [ "bind" "ro" ];
};
# UxPlay AirPlay receiver — audio-only, outputs directly to Scarlett Solo via ALSA. # UxPlay AirPlay receiver — audio-only, outputs directly to Scarlett Solo via ALSA.
# Runs as a system service (no PipeWire needed on a headless server). # Runs as a system service (no PipeWire needed on a headless server).