navidrome: fix up things

roles/containers/tasks/main.yml

@@ -113,6 +113,16 @@
     group: vault
     mode: "u=rwX,g=rwX,o="
 
+- name: Set ACL to allow navidrome to read synced music
+  ansible.posix.acl:
+    default: true
+    entity: navidrome
+    etype: user
+    permissions: rx
+    recursive: true
+    state: present
+    path: "{{ music_path }}"
+
 - name: Create docker-compose directory
   ansible.builtin.file:
     path: "{{ docker_compose_dir }}"

roles/containers/templates/docker-compose.yml.j2

@@ -61,6 +61,7 @@ services:
     environment:
       ND_LISTENBRAINZ_ENABLED: true
       ND_ENABLESHARING: {{ navidrome_sharing | default("false", true) }}
+      ND_SESSIONTIMEOUT: "168h"
     restart: unless-stopped
     volumes:
       - "{{ dataroot }}/navidrome:/data"