{ ... }:
{
  boot.loader.grub = {
    enable = true;
    device = "/dev/vda";
  };

  networking = {
    hostName = "navidrome";
    firewall = {
      enable = true;
      allowedTCPPorts = [ 80 443 ];
    };
  };

  fileSystems = {
    "/mnt/music" = {
      device = "//10.202.40.5/music-ro";
      fsType = "cifs";
      options = [ 
        "username=navidrome" 
        "credentials=/secrets/navidrome-samba-credentials.secret"
        "iocharset=utf8"
        "vers=3.1.1"
        "uid=navidrome"
        "gid=navidrome"
        "_netdev"
      ];
    };
  };

  system.stateVersion = "23.05";
}