From d785c22d688d38f44a961eb4cb0ca8b31fb3eaa2 Mon Sep 17 00:00:00 2001 From: Superredstone Date: Sat, 4 Jul 2026 11:52:37 +0200 Subject: [PATCH] feat(navidrome): add lastfm credentials --- machines/bomba/secrets.nix | 1 + machines/bomba/services/navidrome.nix | 3 ++- secrets/bomba.sops.yaml | 5 +++-- 3 files changed, 6 insertions(+), 3 deletions(-) diff --git a/machines/bomba/secrets.nix b/machines/bomba/secrets.nix index 169853a..a34a9ec 100644 --- a/machines/bomba/secrets.nix +++ b/machines/bomba/secrets.nix @@ -22,6 +22,7 @@ seerr_api_key = default; indexers_ilcorsaroblu_password = default; gitea_registration_token = default; + navidrome_env = default; }; templates = { "gitea_runner.env".content = '' diff --git a/machines/bomba/services/navidrome.nix b/machines/bomba/services/navidrome.nix index 95a6f5f..51b7462 100644 --- a/machines/bomba/services/navidrome.nix +++ b/machines/bomba/services/navidrome.nix @@ -1,7 +1,8 @@ -{ pkgs, ... }: +{ config, ... }: { services.navidrome = { enable = true; + environmentFile = config.sops.secrets.navidrome_env.path; settings = { Port = 8013; MusicFolder = "/var/lib/nixflix/media/music/"; diff --git a/secrets/bomba.sops.yaml b/secrets/bomba.sops.yaml index 22bb074..df13658 100644 --- a/secrets/bomba.sops.yaml +++ b/secrets/bomba.sops.yaml @@ -10,6 +10,7 @@ prowlarr_api_key: ENC[AES256_GCM,data:UDpnqIP64k8Qt9k/sjbESNostFiGHfLo3CEYfyWppH seerr_api_key: ENC[AES256_GCM,data:KDQxxo2W4tz9UokscAUSz7pf7wY2AfsEQpZh2aXGjsQOBgSLt1DEe5LUxealBZju8gabhp4sNGFvp0+ioZpfkg==,iv:V/rbR6bZtVnDhLLVmygGyTf5Ujm8sb2xHy4JuvLiiV8=,tag:MxGzXHbZWgu3H+ICS2tSNQ==,type:str] indexers_ilcorsaroblu_password: ENC[AES256_GCM,data:w3CIGQqLxHEkUHvscZc=,iv:fjsB3zt4Z43MKRECjpa7+gNDzM8D+JK0sbKt2P+Hdiw=,tag:KvLawon+KfrhGmi1TWRHLw==,type:str] gitea_registration_token: ENC[AES256_GCM,data:aHoUBwPXtlme9RgGObwWt1V90JU5qeVBUtpINrb1hY6XjKi4+kLxAg==,iv:zkgDdx82Lku7/oNIoSoKUIrxvZuyPaGUI411V/rkW9c=,tag:0eBC0Kd71UwokH9scs/AKA==,type:str] +navidrome_env: ENC[AES256_GCM,data:SjEg735zoiWNjp0+uYi5CyLadDd7mSXpG1LInLsaqESz0LNgMi+r46ohPjpEC3GD+WbE9D3XRwhB22oIey3K7p3GdB/bYjIR6wOa8MVjj3EDvzdBWbnhkXsGnIhLGuyZwDmMdA==,iv:gHv7lZzU09V3XVjs3nEOEm55xRwD23+sVWfgbuX18p4=,tag:8UAMIGXPGobQfBAao2nI6Q==,type:str] sops: age: - enc: | @@ -21,7 +22,7 @@ sops: ZQ17gIIOjhKHlGx8Lo5t/PekzFyQKCKdijS7caq74dVib1vO3tk+uQ== -----END AGE ENCRYPTED FILE----- recipient: age1ynu6zhhy84rr5xqce0flp25x5tnfgskesxfe39u7ewsk900fvagq9sq0lx - lastmodified: "2026-06-25T10:10:26Z" - mac: ENC[AES256_GCM,data:7g0u/7uWQjIObNyjTj3KvZO056vmqF/21a2yUBF1tLFVO8fI9GY3kHcbwxBp7c02hqzyfIxKahTFXCAKXHodfUWDvUtKiQIdOU49y/wTspib0KiXXAPTF90V4LQpKeMrz1pJQB6/r1j1XnLxgSw0ZaY71QqYCL0N0yRCMwQK2D0=,iv:pStP9LbXPy2HJAbD8aoE7qq84o8irL4uOBttXH1c6Yo=,tag:zfEo2zpHfzMsXRcRexePNQ==,type:str] + lastmodified: "2026-07-02T05:25:14Z" + mac: ENC[AES256_GCM,data:TUdnr6cRqsw+6/yRLAEN4CljcEtr8W+/4VDs9hV/0UDYwl7d0rhqiJK5n/zEBSoB9xcMLiyZBt7p3LJX/CzQcJ6OptCxLyBPMPsWXHk+VgPDK1mRb76ztzsEOyIWx4NtGImy19Q3ljbqw4YPxCqnVe+OU055NwFoTGTogXr2o1A=,iv:6C6owi9l5/pRaq16T8jgCxa3K5E0f7II+AzJknEt7AA=,tag:/rl388Jl2Uc4nmiOlHeTXg==,type:str] unencrypted_suffix: _unencrypted version: 3.13.1