diff --git a/deemz.org/configuration.nix b/deemz.org/configuration.nix
index f811d34..ca915a6 100644
--- a/deemz.org/configuration.nix
+++ b/deemz.org/configuration.nix
@@ -280,9 +280,16 @@ let secrets = import ../secrets.nix; in
         proxyPass = "http://127.0.0.1:9091/transmission/rpc";
         proxyWebsockets = true;
       };
-      locations."/jellyfin/" = {
-        #basicAuth = userlist;
-        proxyPass = "http://127.0.0.1:8096/jellyfin/";
+      #locations."/jellyfin/" = {
+        ##basicAuth = userlist;
+        #proxyPass = "http://127.0.0.1:8096/jellyfin/";
+        #proxyWebsockets = true;
+        #extraConfig = ''
+          #proxy_buffering off;
+        #'';
+      #};
+      locations."/navidrome" = {
+        proxyPass = "http://127.0.0.1:4533/navidrome";
         proxyWebsockets = true;
         extraConfig = ''
           proxy_buffering off;
@@ -332,7 +339,15 @@ let secrets = import ../secrets.nix; in
     plantumlLimitSize = 40000;
   };
 
-  services.jellyfin.enable = true;
+  #services.jellyfin.enable = true;
+
+  services.navidrome = {
+    enable = true;
+    settings = {
+      MusicFolder = "/schijf/music/downloads";
+      BaseUrl = "/navidrome";
+    };
+  };
 
   services.forgejo = {
     enable = true;
diff --git a/secrets.nix b/secrets.nix
new file mode 100644
index 0000000..4a3c771
--- /dev/null
+++ b/secrets.nix
@@ -0,0 +1,9 @@
+{
+  nginx_userlist = { maestro="het is wel even wennen"; };
+
+  duckdns_token = "4defc2ae-610b-4af7-ac16-17d47f490e75";
+
+  cloudflare_zone_id = "5db5e28fdb4abbc3f55cf2fcab6770c1";
+  cloudflare_dns_record_id = "78960756f79d9bb8188b93d377bac78c";
+  cloudflare_api_token = "7kW9P5gKFbwcTHlYCc21iu7srPfT5_-MP_uuq1BD";
+}