feat(navidrome): add lastfm credentials

machines/bomba/secrets.nix

@@ -22,6 +22,7 @@
         seerr_api_key = default;
         indexers_ilcorsaroblu_password = default;
         gitea_registration_token = default;
+        navidrome_env = default;
       };
       templates = {
         "gitea_runner.env".content = ''

machines/bomba/services/navidrome.nix

@@ -1,7 +1,8 @@
-{ pkgs, ... }:
+{ config, ... }:
 {
   services.navidrome = {
     enable = true;
+    environmentFile = config.sops.secrets.navidrome_env.path;
     settings = {
       Port = 8013;
       MusicFolder = "/var/lib/nixflix/media/music/";