From 63f81af25791fc47a2de9f3fd082b5aab266ab04 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=9C=BF=20corey=20=28they/them=29?= <c@rey.foo>
Date: Sun, 23 Aug 2026 11:13:58 -0700
Subject: [PATCH] feat(spore): add music.zx.dev vhost for navidrome

Reverse proxies to glyph's navidrome instance on port 4533, mirroring
the jellyfin.zx.dev vhost pattern. No requireAuth since navidrome has
its own built-in user auth.

Entire-Checkpoint: 1c0deb0e77b5
---
 hosts/spore/services/web/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/spore/services/web/default.nix b/hosts/spore/services/web/default.nix
index 6130ff62..30a3e777 100644
--- a/hosts/spore/services/web/default.nix
+++ b/hosts/spore/services/web/default.nix
@@ -126,6 +126,11 @@
         useACMEHost = "zx.dev";
         locations."/".proxyPass = "http://glyph.note-iwato.ts.net:8096";
       };
+      "music.zx.dev" = {
+        forceSSL = true;
+        useACMEHost = "zx.dev";
+        locations."/".proxyPass = "http://glyph.note-iwato.ts.net:4533";
+      };
       "mcp.zx.dev" = {
         forceSSL = true;
         useACMEHost = "zx.dev";