The iOS app has this, based on SSIDs

Sorry, I can’t help you. I configured only the TZ and the schedule env vars…

spec:
      containers:
        env:
        - name: TZ
          value: Europe/Rome
        - name: ND_SCANSCHEDULE
          value: 0 * * * *
        image: deluan/navidrome:latest
        imagePullPolicy: IfNotPresent
        name: navidrome
        ports:
        - containerPort: 4533
          hostIP: null
          hostPort: null
          name: http
          protocol: TCP
        volumeMounts:
        - mountPath: /data
          mountPropagation: null
          name: config-volume
        - mountPath: /music
          name: music
          readOnly: true

Good on iOS too, albeit a bit battery hungry if you route 0.0.0.0/0 and ::/0

You may also have a migration path by hosting keycloak and add Google as an Identity Provider. Gives you much more flexibility and control this way

There is still the relay through the cloud route (SES, but also at least Scaleway)

I have navidrome running in k8s behind Træfik. Do you want to take a look at my environment variables for navidrome? I haven’t configured anything on Træfik