bundles/navidrome: do not rotate password encryption key

bundles/navidrome/items.py

@@ -1,3 +1,6 @@
+# ensure users set this to avoid using the shared key
+node.metadata.get('navidrome/config/PasswordEncryptionKey')
+
 users = {
     'navidrome': {
         'home': '/opt/navidrome',

bundles/navidrome/metadata.py

@@ -19,7 +19,6 @@ defaults = {
             'EnableInsightsCollector': False,
             'LastFM.Enabled': False,
             'ListenBrainz.Enabled': False,
-            'PasswordEncryptionKey': repo.vault.password_for('{} encryption navidrome'.format(node.name)),
             'Port': 4533,
             'Scanner.Schedule': '@every 72h',
         },

nodes/sophie/sophie.navidrome.toml

@@ -28,6 +28,7 @@ sha1 = 'c5e513fb830f40bea33537ef0c649a3621bd443c'
 
 [metadata.navidrome.config]
 MusicFolder = "/mnt/media/Musik"
+PasswordEncryptionKey = "!decrypt:encrypt$gAAAAABoRXLwSTeGRCvU-eVS-596B4UqjR6sC-AyB17JCLLEaGHDjJUnUXyn3dRKaLNoTCxKQkHIR4K0aAyQkPf7gVEwthZS4UoJCeQhvhFA9udtjSSAMt7E7sMnTFD8qCCoznqSRQzZ"
 
 [metadata.nfs-client.mounts.media]
 mountpoint = '/mnt/media'