From f8bd9f276f272edf405c40929949731fb0ca5002 Mon Sep 17 00:00:00 2001
From: encode42 <me@encode42.dev>
Date: Thu, 26 Feb 2026 06:09:33 -0500
Subject: [PATCH] Update Navidrome to 0.60.3

---
 flake.lock                             | 6 +++---
 hosts/index/config/media/navidrome.nix | 6 +++++-
 packages/server/media/navidrome.nix    | 9 ++++++---
 3 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/flake.lock b/flake.lock
index a298f78..1081cf5 100644
--- a/flake.lock
+++ b/flake.lock
@@ -77,11 +77,11 @@
         ]
       },
       "locked": {
-        "lastModified": 1770023713,
-        "narHash": "sha256-NG6ZUO2vitvN9UiobcCNwEOWeQe3gunnFVF6t0rZx9k=",
+        "lastModified": 1771964110,
+        "narHash": "sha256-jKF/KIJaN7kJolXB1Y0mn9TAGIHu0ALleM4kgx862ac=",
         "owner": "encode42",
         "repo": "nixos-packages",
-        "rev": "8f4c9823fdb7ae1bb1ae823f414248432e7830a5",
+        "rev": "ccd740573d1835c26ddadbc80d6fdf1119138268",
         "type": "github"
       },
       "original": {
diff --git a/hosts/index/config/media/navidrome.nix b/hosts/index/config/media/navidrome.nix
index 59b2a14..9f0a280 100644
--- a/hosts/index/config/media/navidrome.nix
+++ b/hosts/index/config/media/navidrome.nix
@@ -1,6 +1,8 @@
 { flakeRoot, config, ... }:
 
 let
+  host = "hear.encrypted.group";
+
   navidromeModule = import (flakeRoot + /packages/server/media/navidrome.nix) {
     hosts = [
       {
@@ -8,7 +10,7 @@ let
         ssl = "internal";
       }
       {
-        name = "hear.encrypted.group";
+        name = host;
         ssl = "cloudflare";
 
         useLocal = true;
@@ -25,6 +27,8 @@ in
 
   services.navidrome = {
     settings = {
+      BaseURL = "https://${host}";
+
       DataFolder = "/mnt/apps/navidrome";
       MusicFolder = "/mnt/data/media/Music";
     };
diff --git a/packages/server/media/navidrome.nix b/packages/server/media/navidrome.nix
index a2b5c63..d8ea22f 100644
--- a/packages/server/media/navidrome.nix
+++ b/packages/server/media/navidrome.nix
@@ -5,7 +5,8 @@
 {
   config,
   flakeLib,
-  pkgs-unstable,
+  pkgs-personal,
+  lib,
   ...
 }:
 
@@ -16,8 +17,8 @@ in
   services.navidrome = {
     enable = true;
 
-    # Unstable until #481611 is closed
-    package = pkgs-unstable.navidrome;
+    # Unstable until #488091 is merged
+    package = pkgs-personal.navidrome;
 
     settings = {
       Address = "unix:${socket}";
@@ -68,6 +69,8 @@ in
     };
   };
 
+  systemd.services.navidrome.serviceConfig.MemoryDenyWriteExecute = lib.mkForce false;
+
   # Caddy reverse proxy configuration
   users.users.caddy.extraGroups = [ config.users.users.navidrome.group ];
 
-- 
2.51.2