feat(nixos): add navidrome environment secrets

2026-09-12 21:07:57 -04:00
parent 04a771cb07
commit e2f56651a5
2 changed files with 29 additions and 0 deletions
--- a/configs/nixos/modules/services/navidrome.nix
+++ b/configs/nixos/modules/services/navidrome.nix
@@ -23,6 +23,13 @@ in
      readOnly = true;
      description = "Guest path for Navidrome's `MusicFolder` setting.";
    };
+
+    environmentFile = lib.mkOption {
+      type = lib.types.path;
+      default = "/run/secrets/navidrome.env";
+      readOnly = true;
+      description = "Guest path for Navidrome's environment file.";
+    };
  };

  config = lib.mkMerge [
@@ -43,6 +50,7 @@ in
        user = "navidrome";
        group = "storage";
        openFirewall = true;
+        environmentFile = cfg.environmentFile;
        settings = {
          Address = "0.0.0.0";
          Port = 4533;