1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
# Navidrome Music Server Kubernetes Deployment
This directory contains the Kubernetes configuration for deploying Navidrome, a modern music server and streamer compatible with Subsonic/Airsonic clients.
## Overview
- **Application**: Navidrome
- **Image**: `deluan/navidrome:latest`
- **Namespace**: `services`
- **External Ingress**: `navidrome.f3s.buetow.org` (via OpenBSD relayd)
- **LAN Ingress**: `navidrome.f3s.lan.buetow.org` (via FreeBSD CARP + relayd)
- **Port**: 4533
## Access Methods
### External Access (Internet)
Access from anywhere via `https://navidrome.f3s.buetow.org`:
- Routes through OpenBSD relayd (WireGuard tunnel)
- TLS certificates managed by Let's Encrypt
- Available from internet-connected devices
### LAN Access (Local Network)
Access from local network via `https://navidrome.f3s.lan.buetow.org`:
- Routes through FreeBSD CARP VIP (192.168.1.138) with relayd
- TLS certificates managed by cert-manager (self-signed)
- Direct access without WireGuard overhead
- Requires DNS configuration and CA certificate trust (see below)
#### DNS Configuration for LAN
Add to your DNS server or `/etc/hosts`:
```
192.168.1.138 navidrome.f3s.lan.buetow.org
```
#### Trusting Self-Signed CA
To avoid browser warnings, install the f3s LAN CA certificate:
1. Export CA from k3s:
```bash
cd /home/paul/git/conf/f3s/cert-manager
just export-ca
```
2. Install on your device (see `cert-manager/README.md` for platform-specific instructions)
## Storage
Navidrome requires two persistent volumes:
1. **Data Volume** (`/data/nfs/k3svolumes/navidrome/data`): 10Gi
- Stores configuration, database (SQLite), cache, and metadata
- Mounted at `/data` in the container
2. **Music Volume** (`/data/nfs/k3svolumes/navidrome/music`): 200Gi
- Stores your music library
- Mounted at `/music` in the container
## Pre-Deployment Setup
Before deploying, ensure the storage directories exist on the host:
```bash
mkdir -p /data/nfs/k3svolumes/navidrome/data
mkdir -p /data/nfs/k3svolumes/navidrome/music
```
## Deployment
The application is managed by ArgoCD. After committing changes to git and pushing to the r0 remote, ArgoCD will automatically sync and deploy the application.
To manually trigger a sync:
```bash
just sync
```
## Initial Configuration
1. After deployment, access Navidrome at `http://navidrome.f3s.buetow.org`
2. On first access, you'll be prompted to create an admin account
3. Configure settings as needed through the web UI
## Adding Music
Copy or sync your music files to the music volume on the host:
```bash
# On the host with the NFS share
cp -r /path/to/your/music/* /data/nfs/k3svolumes/navidrome/music/
```
Navidrome will automatically scan for new music based on the `ND_SCANSCHEDULE` setting (default: hourly).
## Management Commands
Check deployment status:
```bash
just status
```
View logs:
```bash
just logs
```
Port forward for local access:
```bash
just port-forward
```
Restart the application:
```bash
just restart
```
## Features
- Web-based music player
- Compatible with Subsonic/Airsonic mobile apps
- Automatic metadata fetching from Last.fm
- Playlist support
- Multi-user support
- Transcoding support
- Scrobbling to Last.fm
## Client Apps
Navidrome is compatible with various Subsonic clients:
- **iOS**: play:Sub, substreamer
- **Android**: DSub, Ultrasonic, substreamer
- **Desktop**: Sublime Music, Sonixd
- **Web**: Built-in web player
## Configuration
Environment variables can be adjusted in the deployment.yaml:
- `ND_SCANSCHEDULE`: How often to scan for new music (default: 1h)
- `ND_LOGLEVEL`: Logging level (info, debug, trace)
- `ND_BASEURL`: Base URL if behind a reverse proxy
See [Navidrome documentation](https://www.navidrome.org/docs/usage/configuration-options/) for all available options.
## Troubleshooting
Check pod status:
```bash
kubectl get pods -n services | grep navidrome
```
View detailed logs:
```bash
kubectl logs -n services -l app=navidrome --tail=200
```
Check persistent volume claims:
```bash
kubectl get pvc -n services | grep navidrome
```
## Security
- Authentication is handled by Navidrome itself
- No secrets are stored in git
- User accounts are managed through the web UI
- Consider enabling HTTPS in production
|
