Details

• rclone mount: mega-personal remote at /home/thomas/mounts/navidrome-music
• systemd service runs as User=thomas
• VFS flags: --vfs-cache-mode writes --vfs-cache-max-size 2G
• Music is mounted read-only into the container

Authelia Rule

- domain: music.buckstabu.dev
  policy: two_factor
- domain: music.buckstabu.dev
  resources:
    - "^/rest/.*"
    - "^/api/.*"
  policy: bypass

Caddy Config Snippet

music.buckstabu.dev {
  reverse_proxy localhost:4533
}

Useful Commands

$docker compose -f /root/server/navidrome/compose.yaml restart

$docker logs -f navidrome

Clients

• Mobile: Symfonium Pro
• Web: Feishin at feishin.vercel.app (direct FLAC, no transcoding)

Pending: MusicBrainz Picard reorg → Spotify import