1
0
Fork 0

Services: add Home Assistant

This commit is contained in:
Aires 2024-09-06 12:57:11 -04:00
parent 6dd9deb8ea
commit da5b11a042
4 changed files with 84 additions and 6 deletions

View file

@ -378,11 +378,11 @@
"secrets": {
"flake": false,
"locked": {
"lastModified": 1725637263,
"narHash": "sha256-BSm/HKTPBSk50KN81ZBnjeMvcrGZVZvsEmJHykOcse0=",
"lastModified": 1725641701,
"narHash": "sha256-bTnYSs06iwnS6a1jYLpwjwVpFcP/iDs/6q5gnFcO+sQ=",
"ref": "refs/heads/main",
"rev": "b9c55a92921b5dc02d548c00ec226bc49e129088",
"revCount": 67,
"rev": "25576ffa753b96e2289380feb81d3ed82e00cbc7",
"revCount": 68,
"type": "git",
"url": "file:./secrets"
},

View file

@ -144,6 +144,12 @@ in
token = config.secrets.services.forgejo.runner-token;
};
};
home-assistant = {
enable = false;
home = "${services-root}/home-assistant";
domain = config.secrets.networking.domains.primary;
url = config.secrets.services.home-assistant.url;
};
jellyfin = {
enable = true;
home = "${services-root}/jellyfin";
@ -174,7 +180,7 @@ in
return = "301 https://${config.secrets.services.forgejo.url}";
};
};
"${config.secrets.networking.domains.blog}" = {
"]${config.secrets.networking.domains.blog}" = {
useACMEHost = config.secrets.networking.domains.blog;
forceSSL = true;
root = "${services-root}/nginx/sites/${config.secrets.networking.domains.blog}";

View file

@ -0,0 +1,72 @@
{ config, lib, ... }:
let
cfg = config.aux.system.services.home-assistant;
in
{
options = {
aux.system.services.home-assistant = {
enable = lib.mkEnableOption (lib.mdDoc "Enables Home Assistant.");
domain = lib.mkOption {
default = "";
type = lib.types.str;
description = "The root domain that Home Assistant will be hosted on.";
example = "example.com";
};
home = lib.mkOption {
default = "/etc/home-assistant";
type = lib.types.str;
description = "Where to store Home Assistant's files";
example = "/home/home-assistant";
};
url = lib.mkOption {
default = "";
type = lib.types.str;
description = "The complete URL where Home Assistant is hosted.";
example = "https://home-assistant.example.com";
};
};
};
config = lib.mkIf cfg.enable {
services = {
home-assistant = {
# opt-out from declarative configuration management
config = null;
lovelaceConfig = null;
# configure the path to your config directory
configDir = cfg.home;
# specify list of components required by your configuration
extraComponents = [
"esphome"
"eufy"
"govee_light_local"
"met"
"radio_browser"
"tplink"
];
};
nginx.virtualHosts."${cfg.url}" = {
useACMEHost = cfg.domain;
forceSSL = true;
locations."/" = {
proxyPass = "http://127.0.0.1:8123";
proxyWebsockets = true;
extraConfig = ''
# Security / XSS Mitigation Headers
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options "nosniff";
proxy_ssl_server_name on;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_buffering off;
'';
};
};
};
};
}

@ -1 +1 @@
Subproject commit b9c55a92921b5dc02d548c00ec226bc49e129088
Subproject commit 25576ffa753b96e2289380feb81d3ed82e00cbc7