add lidarr

flake.nix

@@ -132,6 +132,7 @@
           metrics = "metrics.${baseName}";
           minecraft = "minecraft.${baseName}";
           n8n = "n8n.${baseName}";
+          navidrome = "music.${baseName}";
           notifications = "ntfy.${baseName}";
           paperless = "paper.${baseName}";
           photos = "photos.${baseName}";

platforms/nixos/modules/nmasur/presets/services/arr/arr.nix

@@ -27,6 +27,11 @@ let
       url = "localhost:8989";
       apiKey = config.secrets.sonarrApiKey.dest;
     };
+    lidarr = {
+      exportarrPort = "9712";
+      url = "localhost:8686";
+      apiKey = config.secrets.lidarrApiKey.dest;
+    };
     prowlarr = {
       exportarrPort = "9709";
       url = "localhost:9696";
@@ -78,6 +83,9 @@ in
       readarr = {
         enable = true;
       };
+      lidarr = {
+        enable = true;
+      };
     };
 
     # Allows shared group to read/write the sabnzbd directory
@@ -133,6 +141,20 @@ in
           }
         ];
       }
+      {
+        match = [
+          {
+            host = [ hostnames.download ];
+            path = [ "/lidarr*" ];
+          }
+        ];
+        handle = [
+          {
+            handler = "reverse_proxy";
+            upstreams = [ { dial = arrConfig.lidarr.url; } ];
+          }
+        ];
+      }
       {
         match = [
           {
@@ -252,6 +274,11 @@ in
       dest = "/var/private/sonarr-api";
       prefix = "API_KEY=";
     };
+    secrets.lidarrApiKey = {
+      source = ./lidarr-api-key.age;
+      dest = "/var/private/lidarr-api";
+      prefix = "API_KEY=";
+    };
     secrets.prowlarrApiKey = {
       source = ./prowlarr-api-key.age;
       dest = "/var/private/prowlarr-api";

platforms/nixos/modules/nmasur/presets/services/arr/lidarr-api-key.age

@@ -0,0 +1,17 @@
+-----BEGIN AGE ENCRYPTED FILE-----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+-----END AGE ENCRYPTED FILE-----

platforms/nixos/modules/nmasur/presets/services/navidrome.nix

@@ -0,0 +1,43 @@
+# Navidrome is a self-hosted music streaming service. This means I can play
+# files from my server to devices.
+
+{ config, lib, ... }:
+
+let
+  inherit (config.nmasur.settings) hostnames;
+  cfg = config.nmasur.presets.services.navidrome;
+in
+
+{
+
+  options.nmasur.presets.services.navidrome.enable = lib.mkEnableOption "Navidrome music streaming";
+
+  config = lib.mkIf cfg.enable {
+
+    services.navidrome = {
+      enable = true;
+      settings = {
+        MusicFolder = "/data/audio/music";
+        EnableInsightsCollector = false;
+      };
+    };
+
+    # Configure Cloudflare DNS to point to this machine
+    services.cloudflare-dyndns.domains = [ hostnames.navidrome ];
+
+    # Allow web traffic to Caddy
+    nmasur.presets.services.caddy.routes = [
+      {
+        match = [ { host = [ hostnames.navidrome ]; } ];
+        handle = [
+          {
+            handler = "reverse_proxy";
+            upstreams = [
+              { dial = "localhost:${builtins.toString config.services.navidrome.settings.Port}"; }
+            ];
+          }
+        ];
+      }
+    ];
+  };
+}

platforms/nixos/modules/nmasur/profiles/nas.nix

@@ -31,6 +31,7 @@ in
         immich.enable = lib.mkDefault true;
         jellyfin.enable = lib.mkDefault true;
         litestream.enable = lib.mkDefault true;
+        navidrome.enable = lib.mkDefault true;
         nextcloud.enable = lib.mkDefault true;
         nix-autoupgrade.enable = lib.mkDefault false; # Off by default for NAS
         paperless.enable = lib.mkDefault true;