diff --git a/projects/music/project.yaml b/projects/music/project.yaml
new file mode 100644
index 00000000..72c02bc0
--- /dev/null
+++ b/projects/music/project.yaml
@@ -0,0 +1,11 @@
+config:
+  description: Music Streaming
+  syncWave: 100
+  repo: k8s-at-home
+
+apps:
+- name: navidrome
+  chart: navidrome
+  targetRevision: 6.3.2
+  include:
+  - ingress-internal
diff --git a/projects/music/values/navidrome.yaml b/projects/music/values/navidrome.yaml
new file mode 100644
index 00000000..4e5eaead
--- /dev/null
+++ b/projects/music/values/navidrome.yaml
@@ -0,0 +1,51 @@
+image:
+  repository: deluan/navidrome
+  tag: 0.43.0
+
+ingress:
+  main:
+    enabled: true
+    annotations:
+      cert-manager.io/cluster-issuer: vault-issuer
+      traefik.ingress.kubernetes.io/router.tls: 'true'
+    hosts:
+    - host: music.dc
+      paths:
+      - path: /
+        pathType: Prefix
+    tls:
+    - secretName: music-tls
+      hosts:
+      - music.dc
+env:
+  # -- Set the container timezone
+  TZ: UTC
+  # -- Log level. Useful for troubleshooting.
+  ND_LOGLEVEL: info
+  # -- How long Navidrome will wait before closing web ui idle sessions
+  ND_SESSIONTIMEOUT: 24h
+  # -- Enables transcoding configuration in the UI
+  ND_ENABLETRANSCODINGCONFIG: "true"
+  # -- Folder where your music library is stored.
+  ND_MUSICFOLDER: /music
+
+securityContext:
+  privileged: false
+
+podSecurityContext:
+  #runAsUser: 1000
+  runAsGroup: 1000
+  fsGroup: 1000
+
+persistence:
+  config:
+    enabled: true
+    mountPath: /data
+    storageClass: local-path
+    accessMode: ReadWriteOnce
+    size: 1Gi
+  music:
+    enabled: true
+    type: hostPath
+    mountPath: /music
+    hostPath: /data/media/music