diff --git a/modules/server/navidrome.nix b/modules/server/navidrome.nix
index af9df3c..96c3001 100644
--- a/modules/server/navidrome.nix
+++ b/modules/server/navidrome.nix
@@ -1,9 +1,27 @@
-{ config, lib, ... }:
 {
+  config,
+  lib,
+  pkgs,
+  ...
+}:
+let
+  sock = "/run/navidrome/navidrome.sock";
+in
+{
+  systemd.services = lib.mkIf (config.services.navidrome.enable) {
+    navidrome = {
+      serviceConfig.ExecStartPost = [
+        "${pkgs.coreutils}/bin/sleep 1"
+        "+${pkgs.coreutils}/bin/chgrp nginx ${sock}"
+      ];
+    };
+  };
+
   services.navidrome = {
     enable = true;
     settings = {
       MusicFolder = "/mnt/stuff/music";
+      Address = "unix:${sock}";
     };
   };
 
@@ -14,7 +32,7 @@
         http2 = true;
         sslCertificate = config.sops.secrets."ssl/cert".path;
         sslCertificateKey = config.sops.secrets."ssl/key".path;
-        locations."/".proxyPass = "http://127.0.0.1:4533";
+        locations."/".proxyPass = "http://unix:${sock}";
       };
     })
   ];