diff --git a/bert/services/navidrome.nix b/bert/services/navidrome.nix
index bf6bc3e..c37fcc4 100644
--- a/bert/services/navidrome.nix
+++ b/bert/services/navidrome.nix
@@ -1,4 +1,4 @@
-{
+{lib, ...}: {
   services.navidrome = {
     enable = true;
     # 0.60.0
@@ -9,6 +9,7 @@
       EnableSharing = true;
     };
   };
+  systemd.services.navidrome.serviceConfig.MemoryDenyWriteExecute = lib.mkForce false; # https://github.com/navidrome/navidrome/issues/5006#issuecomment-3904723350 (drop with 26.05, probably)
   systemd.services.navidrome.after = [ "mnt-bigbird_public.mount" ];
   systemd.services.navidrome.requires = [ "mnt-bigbird_public.mount" ];
 }