From 6516c5c9b71156273aa4ecc0dad72deb63190f41 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Kier=C3=A1n=20Meinhardt?= <kmein@posteo.de>
Date: Thu, 8 Apr 2021 11:59:30 +0200
Subject: [PATCH] feat(mpd-fm): allow network access with password

---
 configs/mpd-fm.nix | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/configs/mpd-fm.nix b/configs/mpd-fm.nix
index 6b84ac2..e9b9318 100644
--- a/configs/mpd-fm.nix
+++ b/configs/mpd-fm.nix
@@ -4,6 +4,7 @@ let
     di-fm-key = lib.strings.fileContents <secrets/di.fm/key>;
   };
   multi-room-audio-port = 8000;
+  password = lib.strings.fileContents <system-secrets/mpd-web.key>;
 in
 {
   imports = [
@@ -12,10 +13,13 @@ in
 
   services.mpd = {
     enable = true;
+    network.listenAddress = "0.0.0.0";
     extraConfig = ''
       log_level "default"
       auto_update "yes"
 
+      password "${password}@read,add,control"
+
       audio_output {
         type "pulse"
         name "zaatar single room audio system"
@@ -62,7 +66,8 @@ in
     '';
   };
 
-  networking.firewall.allowedTCPPorts = [ 80 ];
+  networking.firewall.allowedTCPPorts = [ 80 config.services.mpd.network.port ];
+
   services.nginx = {
     enable = true;
     recommendedGzipSettings = true;
@@ -70,7 +75,7 @@ in
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
     virtualHosts.default = {
-      basicAuth.dj = lib.strings.fileContents <system-secrets/mpd-web.key>;
+      basicAuth.dj = password;
       locations."= /listen.ogg" = {
         proxyPass = "http://127.0.0.1:${toString multi-room-audio-port}";
       };