73 lines
1.9 KiB
Nix
73 lines
1.9 KiB
Nix
|
{ config, lib, ... }:
|
||
|
|
|
||
|
|
let
|
||
|
|
cfg = config.aux.system.services.home-assistant;
|
||
|
|
in
|
||
|
|
{
|
||
|
|
options = {
|
||
|
|
aux.system.services.home-assistant = {
|
||
|
|
enable = lib.mkEnableOption (lib.mdDoc "Enables Home Assistant.");
|
||
|
|
domain = lib.mkOption {
|
||
|
|
default = "";
|
||
|
|
type = lib.types.str;
|
||
|
|
description = "The root domain that Home Assistant will be hosted on.";
|
||
|
|
example = "example.com";
|
||
|
|
};
|
||
|
|
home = lib.mkOption {
|
||
|
|
default = "/etc/home-assistant";
|
||
|
|
type = lib.types.str;
|
||
|
|
description = "Where to store Home Assistant's files";
|
||
|
|
example = "/home/home-assistant";
|
||
|
|
};
|
||
|
|
url = lib.mkOption {
|
||
|
|
default = "";
|
||
|
|
type = lib.types.str;
|
||
|
|
description = "The complete URL where Home Assistant is hosted.";
|
||
|
|
example = "https://home-assistant.example.com";
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
config = lib.mkIf cfg.enable {
|
||
|
|
services = {
|
||
|
|
home-assistant = {
|
||
|
|
# opt-out from declarative configuration management
|
||
|
|
config = null;
|
||
|
|
lovelaceConfig = null;
|
||
|
|
# configure the path to your config directory
|
||
|
|
configDir = cfg.home;
|
||
|
|
# specify list of components required by your configuration
|
||
|
|
extraComponents = [
|
||
|
|
"esphome"
|
||
|
|
"eufy"
|
||
|
|
"govee_light_local"
|
||
|
|
"met"
|
||
|
|
"radio_browser"
|
||
|
|
"tplink"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
nginx.virtualHosts."${cfg.url}" = {
|
||
|
|
useACMEHost = cfg.domain;
|
||
|
|
forceSSL = true;
|
||
|
|
locations."/" = {
|
||
|
|
proxyPass = "http://127.0.0.1:8123";
|
||
|
|
proxyWebsockets = true;
|
||
|
|
extraConfig = ''
|
||
|
|
# Security / XSS Mitigation Headers
|
||
|
|
add_header X-Frame-Options "SAMEORIGIN";
|
||
|
|
add_header X-Content-Type-Options "nosniff";
|
||
|
|
|
||
|
|
proxy_ssl_server_name on;
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
|
||
|
|
proxy_buffering off;
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|