new start !

Containers/Navidrome/compose.yml

@@ -0,0 +1,31 @@
+services:
+  navidrome-ts:
+    image: tailscale/tailscale
+    container_name: navidrome-ts
+    cap_add:
+      - net_admin
+    devices:
+      - /dev/net/tun:/dev/net/tun
+    volumes:
+      - ./tailscale/state:/var/lib/tailscale
+      - ./serveconfig:/config
+    environment:
+      - TS_AUTHKEY=${TS_AUTHKEY}
+      - TS_EXTRA_ARGS=--advertise-tags=tag:navidrome --reset
+      - TS_STATE_DIR=/var/lib/tailscale
+      - TS_SERVE_CONFIG=/config/serve-config.json
+      - TS_USERSPACE=false
+    hostname: music
+    restart: unless-stopped
+    
+  navidrome:
+    network_mode: service:navidrome-ts
+    container_name: navidrome
+    image: deluan/navidrome:latest
+    user: 1000:1000 # should be owner of volumes
+    # ports:
+    #   - "4533:4533"
+    restart: unless-stopped
+    volumes:
+      - "./data:/data"
+      - "/mnt/usb-ssd-01/music:/music:ro"

Containers/Navidrome/data/navidrome.toml

@@ -0,0 +1,2 @@
+[scanner]
+PurgeMissing = "always"

Containers/Navidrome/serveconfig/serve-config.json

@@ -0,0 +1,19 @@
+{
+  "TCP": {
+    "443": {
+      "HTTPS": true
+    }
+  },
+  "Web": {
+    "${TS_CERT_DOMAIN}:443": {
+      "Handlers": {
+        "/": {
+          "Proxy": "http://127.0.0.1:4533"
+        }
+      }
+    }
+  },
+  "AllowFunnel": {
+    "${TS_CERT_DOMAIN}:443": true
+  }
+}