From 51a878cddbc0e02a682d5dd678d80c2d4b57f063 Mon Sep 17 00:00:00 2001
From: Erich Blume <blume.erich@gmail.com>
Date: Sat, 18 Apr 2026 20:25:19 -0700
Subject: [PATCH] C0: review navidrome reference doc

---
 docs/changelog.d/+review-navidrome-doc.doc.md |  1 +
 docs/reference/services/navidrome.md          | 28 +++++++++++++++++--
 2 files changed, 26 insertions(+), 3 deletions(-)
 create mode 100644 docs/changelog.d/+review-navidrome-doc.doc.md

diff --git a/docs/changelog.d/+review-navidrome-doc.doc.md b/docs/changelog.d/+review-navidrome-doc.doc.md
new file mode 100644
index 0000000..fbe5e79
--- /dev/null
+++ b/docs/changelog.d/+review-navidrome-doc.doc.md
@@ -0,0 +1 @@
+Review and refresh the Navidrome reference card: add `last-reviewed`, correct the scanner env var name, document the current image/version, and record routing and runtime details from the manifests.
diff --git a/docs/reference/services/navidrome.md b/docs/reference/services/navidrome.md
index 5f93331..68a2a21 100644
--- a/docs/reference/services/navidrome.md
+++ b/docs/reference/services/navidrome.md
@@ -1,6 +1,7 @@
 ---
 title: Navidrome
-modified: 2026-02-21
+modified: 2026-04-18
+last-reviewed: 2026-04-18
 tags:
   - service
   - media
@@ -16,8 +17,15 @@ Self-hosted music streaming server.
 |----------|-------|
 | **URL** | https://dj.ops.eblu.me |
 | **Tailscale URL** | https://dj.tail8d86e.ts.net |
+| **ArgoCD app** | `navidrome` |
+| **Sync policy** | Manual |
 | **Namespace** | `navidrome` |
 | **Manifests** | `argocd/manifests/navidrome/` |
+| **Image** | `registry.ops.eblu.me/blumeops/navidrome:v0.61.1-3ecd888` |
+| **Tracked upstream version** | `v0.61.1` |
+
+Traffic reaches Navidrome through a Tailscale Ingress at `dj.tail8d86e.ts.net`,
+with [[caddy]] proxying `dj.ops.eblu.me` to that tailnet endpoint.
 
 ## Storage
 
@@ -32,16 +40,30 @@ The `/data` directory contains SQLite database, configuration, and cache.
 
 | Variable | Value |
 |----------|-------|
-| `ND_SCANSCHEDULE` | 1h |
+| `ND_SCANNER_SCHEDULE` | `@every 1h` |
 | `ND_LOGLEVEL` | info |
 | `ND_MUSICFOLDER` | /music |
 | `ND_DATAFOLDER` | /data |
 
+## Runtime
+
+| Property | Value |
+|----------|-------|
+| **Replicas** | 1 |
+| **Container port** | `4533` |
+| **Requests** | `100m` CPU, `128Mi` memory |
+| **Limits** | `500m` CPU, `512Mi` memory |
+| **Security context** | Runs as uid/gid `1000`, `fsGroup: 1000`, `RuntimeDefault` seccomp |
+| **Health checks** | Liveness/readiness probe on `GET /ping` |
+
 ## Authentication
 
 Local accounts only. Authentik SSO integration was evaluated (Feb 2026) but not pursued — Navidrome lacks native OIDC support. The reverse proxy auth approach (`ND_EXTAUTH_*`) can pass a username header from Authentik, but cannot map Authentik groups to Navidrome admin status, making group-based admin delegation impossible.
 
 ## Related
 
-- [[jellyfin]] - Video streaming
+- [[routing]] - URL and exposure model
+- [[caddy]] - Reverse proxy from `dj.ops.eblu.me` to the tailnet ingress
 - [[sifaka|Sifaka]] - Music storage
+- [[jellyfin]] - Video streaming
+- [[service-versions]] - Tracked upstream version inventory