blumeops/docs/reference/services/navidrome.md

---
title: Navidrome
modified: 2026-04-18
last-reviewed: 2026-04-18
tags:
  - service
  - media
---

# Navidrome

Self-hosted music streaming server.

## Quick Reference

| Property | Value |
|----------|-------|
| **URL** | https://dj.ops.eblu.me |
| **Tailscale URL** | https://dj.tail8d86e.ts.net |
| **ArgoCD app** | `navidrome` |
| **Sync policy** | Manual |
| **Namespace** | `navidrome` |
| **Manifests** | `argocd/manifests/navidrome/` |
| **Image** | `registry.ops.eblu.me/blumeops/navidrome:v0.61.1-3ecd888` |
| **Tracked upstream version** | `v0.61.1` |

Traffic reaches Navidrome through a Tailscale Ingress at `dj.tail8d86e.ts.net`,
with [[caddy]] proxying `dj.ops.eblu.me` to that tailnet endpoint.

## Storage

| Mount | Type | Source | Access |
|-------|------|--------|--------|
| /music | NFS PV | sifaka:/volume1/music | Read-only |
| /data | Local PVC (10Gi) | minikube storage | Read-write |

The `/data` directory contains SQLite database, configuration, and cache.

## Configuration

| Variable | Value |
|----------|-------|
| `ND_SCANNER_SCHEDULE` | `@every 1h` |
| `ND_LOGLEVEL` | info |
| `ND_MUSICFOLDER` | /music |
| `ND_DATAFOLDER` | /data |

## Runtime

| Property | Value |
|----------|-------|
| **Replicas** | 1 |
| **Container port** | `4533` |
| **Requests** | `100m` CPU, `128Mi` memory |
| **Limits** | `500m` CPU, `512Mi` memory |
| **Security context** | Runs as uid/gid `1000`, `fsGroup: 1000`, `RuntimeDefault` seccomp |
| **Health checks** | Liveness/readiness probe on `GET /ping` |

## Authentication

Local accounts only. Authentik SSO integration was evaluated (Feb 2026) but not pursued — Navidrome lacks native OIDC support. The reverse proxy auth approach (`ND_EXTAUTH_*`) can pass a username header from Authentik, but cannot map Authentik groups to Navidrome admin status, making group-based admin delegation impossible.

## Related

- [[routing]] - URL and exposure model
- [[caddy]] - Reverse proxy from `dj.ops.eblu.me` to the tailnet ingress
- [[sifaka|Sifaka]] - Music storage
- [[jellyfin]] - Video streaming
- [[service-versions]] - Tracked upstream version inventory
Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00			`---`
Update all docs titles to human-readable (#117) ## Summary - Updated frontmatter `title:` in all 63 doc cards from slug-case to human-readable (e.g. `borgmatic` → `Borgmatic`, `ai-assistance-guide` → `AI Assistance Guide`) - Titles now closely match file stems so `[[wiki-links]]` render naturally without alternate anchor text - Corrected titles that diverged from stems (e.g. `host-inventory` → `Hosts`, `grafana-alloy` → `Alloy`, `argocd-applications` → `Apps`) - Deleted `title-test-alpha.md` and `title-test-beta.md` test cards and removed their reference index entry ## Deployment and Testing - [x] `docs-check-links` passes — all wiki-links valid - [x] `docs-check-index` passes - [x] `docs-check-filenames` passes - [ ] Verify titles render correctly on docs site after deploy Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/117 2026-02-07 21:44:57 -08:00			`title: Navidrome`
C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			`modified: 2026-04-18`
			`last-reviewed: 2026-04-18`
Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00			`tags:`
			`- service`
			`- media`
			`---`

			`# Navidrome`

			`Self-hosted music streaming server.`

			`## Quick Reference`

			`\| Property \| Value \|`
			`\|----------\|-------\|`
			`\| URL \| https://dj.ops.eblu.me \|`
			`\| Tailscale URL \| https://dj.tail8d86e.ts.net \|`
C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			\| ArgoCD app \| `navidrome` \|
			`\| Sync policy \| Manual \|`
Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00			\| Namespace \| `navidrome` \|
			\| Manifests \| `argocd/manifests/navidrome/` \|
C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			\| Image \| `registry.ops.eblu.me/blumeops/navidrome:v0.61.1-3ecd888` \|
			\| Tracked upstream version \| `v0.61.1` \|

			Traffic reaches Navidrome through a Tailscale Ingress at `dj.tail8d86e.ts.net`,
			with [[caddy]] proxying `dj.ops.eblu.me` to that tailnet endpoint.
Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00
			`## Storage`

			`\| Mount \| Type \| Source \| Access \|`
			`\|-------\|------\|--------\|--------\|`
			`\| /music \| NFS PV \| sifaka:/volume1/music \| Read-only \|`
			`\| /data \| Local PVC (10Gi) \| minikube storage \| Read-write \|`

			The `/data` directory contains SQLite database, configuration, and cache.

			`## Configuration`

			`\| Variable \| Value \|`
			`\|----------\|-------\|`
C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			\| `ND_SCANNER_SCHEDULE` \| `@every 1h` \|
Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00			\| `ND_LOGLEVEL` \| info \|
			\| `ND_MUSICFOLDER` \| /music \|
			\| `ND_DATAFOLDER` \| /data \|

C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			`## Runtime`

			`\| Property \| Value \|`
			`\|----------\|-------\|`
			`\| Replicas \| 1 \|`
			\| Container port \| `4533` \|
			\| Requests \| `100m` CPU, `128Mi` memory \|
			\| Limits \| `500m` CPU, `512Mi` memory \|
			\| Security context \| Runs as uid/gid `1000`, `fsGroup: 1000`, `RuntimeDefault` seccomp \|
			\| Health checks \| Liveness/readiness probe on `GET /ping` \|

No navidrome authentikation 2026-02-21 20:33:48 -08:00			`## Authentication`

			Local accounts only. Authentik SSO integration was evaluated (Feb 2026) but not pursued — Navidrome lacks native OIDC support. The reverse proxy auth approach (`ND_EXTAUTH_*`) can pass a username header from Authentik, but cannot map Authentik groups to Navidrome admin status, making group-based admin delegation impossible.

Phase 2: Add Reference section with 24 technical reference cards (#88) ## Summary - Create `docs/reference/` section with 24 technical reference cards - Services (16): alloy, argocd, borgmatic, 1password, forgejo, grafana, jellyfin, kiwix, loki, miniflux, navidrome, postgresql, prometheus, teslamate, transmission, zot - Infrastructure (3): hosts, tailscale, routing - Kubernetes (2): cluster, apps - Storage (2): sifaka, backups - Update README to mark Phase 2 as complete - Add towncrier changelog fragment ## Deployment and Testing - [ ] Build docs locally to verify wiki-links resolve - [ ] Deploy via ArgoCD and verify at docs.ops.eblu.me/reference/ 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/88 2026-02-03 14:27:37 -08:00			`## Related`

C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			`- [[routing]] - URL and exposure model`
			- [[caddy]] - Reverse proxy from `dj.ops.eblu.me` to the tailnet ingress
Enforce unique doc filenames and simple wiki-links (#109) ## Summary - Rename section index files to match their titles (tutorials.md, reference.md, how-to.md, explanation.md) so all filenames are unique - Convert all ~47 path-based wiki-links to simple filename format across 15 files - Update doc-filenames task to no longer skip index.md files - Update doc-links task to reject path-based links containing '/' This ensures all wiki-links work correctly in obsidian.nvim by making links resolvable by filename alone. ## Testing - `mise run doc-filenames` - all unique - `mise run doc-links` - no broken or path-based links - `mise run doc-titles` - no duplicates Reviewed-on: https://forge.ops.eblu.me/eblume/blumeops/pulls/109 2026-02-04 17:21:34 -08:00			`- [[sifaka\|Sifaka]] - Music storage`
C0: review navidrome reference doc 2026-04-18 20:25:19 -07:00			`- [[jellyfin]] - Video streaming`
			`- [[service-versions]] - Tracked upstream version inventory`