adds navidrome

docker/navidrome/compose.yaml

@@ -0,0 +1,23 @@
+services:
+  navidrome:
+    image: deluan/navidrome:latest
+    container_name: navidrome
+    restart: unless-stopped
+    # timothykim:sambagroup — needs group-read on the music files. Without an
+    # explicit user the image runs as root.
+    user: "1000:1001"
+    networks:
+      - shared
+    volumes:
+      - ./data:/data
+      - /opt/argento/smb/media/Music:/music:ro
+    environment:
+      TZ: America/New_York
+      # Navidrome watches the filesystem, but a periodic sweep catches anything
+      # inotify missed. Default is 0 (watcher only).
+      ND_SCANNER_SCHEDULE: "@every 24h"
+
+networks:
+  shared:
+    external: true
+

system/firewalld/public.xml

@@ -8,6 +8,7 @@
   <service name="samba"/>
   <service name="https"/>
   <service name="smtp"/>
+  <service name="mdns"/>
   <port port="465" protocol="tcp"/>
   <port port="19999" protocol="tcp"/>
   <port port="3901" protocol="tcp"/>