image: repository: ghcr.io/navidrome/navidrome tag: 0.51.1 env: TZ: "Europe/Amsterdam" ND_DATAFOLDER: /config ND_LOGLEVEL: info ND_MUSICFOLDER: /music ND_PORT: 8080 #ND_REVERSEPROXYUSERHEADER: "Remote-User" ND_REVERSEPROXYWHITELIST: "0.0.0.0/0" #ND_SCANSCHEDULE: "@every 1h" ND_SESSIONTIMEOUT: 24h ND_LISTENBRAINZ_ENABLED: "false" ND_LASTFM_ENABLED: "false" ND_PROMETHEUS_ENABLED: "false" ND_ENABLEGRAVATAR: "false" service: main: ports: http: port: 8080 ingress: main: enabled: true ingressClassName: "ingress-internal" annotations: cert-manager.io/cluster-issuer: vault-issuer traefik.ingress.kubernetes.io/router.tls: 'true' hosts: - host: music.dc paths: - path: / pathType: Prefix tls: - secretName: music-tls hosts: - music.dc podSecurityContext: runAsUser: 568 runAsGroup: 568 fsGroup: 568 fsGroupChangePolicy: "OnRootMismatch" supplementalGroups: - 100 persistence: config: enabled: true music: enabled: true type: hostPath hostPath: /data/media/music mountPath: /music readOnly: true resources: requests: cpu: 10m memory: 50Mi limits: memory: 750Mi