feat(etna): replace subsonic with navidrome

systems/etna/default.nix

@@ -28,7 +28,7 @@ in {
     ./forgejo.nix
     ./shlink.nix
     ./metrics.nix
-    ./subsonic.nix
+    ./navidrome.nix
   ];
 
   boot = {

systems/etna/navidrome.nix

@@ -0,0 +1,35 @@
+{
+  config,
+  _utils,
+  ...
+}: let
+  cfg = config.services.navidrome;
+
+  env = _utils.setupSingleSecret config "navidromeEnv" {
+    inherit (cfg) group;
+    owner = cfg.user;
+  };
+in {
+  imports = [env.generate];
+
+  cfTunnels."navidrome.uku3lig.net" = "http://localhost:4533";
+
+  services.navidrome = {
+    enable = true;
+    settings = {
+      Address = "127.0.0.1";
+      Port = 4533;
+      MusicFolder = "/data/subsonic/music";
+      BaseUrl = "https://navidrome.uku3lig.net";
+    };
+  };
+
+  systemd.services.navidrome.serviceConfig = {
+    EnvironmentFile = env.path;
+    # https://github.com/NixOS/nixpkgs/pull/290901
+    BindReadOnlyPaths = [
+      "/run/systemd/resolve/stub-resolv.conf"
+      "/run/systemd/resolve/resolv.conf"
+    ];
+  };
+}

systems/etna/subsonic.nix

@@ -1,13 +0,0 @@
-{
-  cfTunnels."subsonic.uku3lig.net" = "http://localhost:4040";
-
-  services.subsonic = {
-    enable = true;
-    port = 4040;
-    maxMemory = 200;
-
-    defaultMusicFolder = "/data/subsonic/music";
-    defaultPlaylistFolder = "/data/subsonic/playlist";
-    defaultPodcastFolder = "/data/subsonic/podcast";
-  };
-}