diff --git a/roles/containers/tasks/main.yml b/roles/containers/tasks/main.yml
index a344958..c4d39ec 100644
--- a/roles/containers/tasks/main.yml
+++ b/roles/containers/tasks/main.yml
@@ -113,6 +113,16 @@
     group: vault
     mode: "u=rwX,g=rwX,o="
 
+- name: Set ACL to allow navidrome to read synced music
+  ansible.posix.acl:
+    default: true
+    entity: navidrome
+    etype: user
+    permissions: rx
+    recursive: true
+    state: present
+    path: "{{ music_path }}"
+
 - name: Create docker-compose directory
   ansible.builtin.file:
     path: "{{ docker_compose_dir }}"
diff --git a/roles/containers/templates/docker-compose.yml.j2 b/roles/containers/templates/docker-compose.yml.j2
index 4a8396d..317e685 100644
--- a/roles/containers/templates/docker-compose.yml.j2
+++ b/roles/containers/templates/docker-compose.yml.j2
@@ -61,6 +61,7 @@ services:
     environment:
       ND_LISTENBRAINZ_ENABLED: true
       ND_ENABLESHARING: {{ navidrome_sharing | default("false", true) }}
+      ND_SESSIONTIMEOUT: "168h"
     restart: unless-stopped
     volumes:
       - "{{ dataroot }}/navidrome:/data"