From 16eea6871447e2bda93800825c07468045731bdc Mon Sep 17 00:00:00 2001 From: Alejandro Soto Date: Sun, 21 Jul 2024 16:37:28 -0600 Subject: sys/home-assistant: enable proxy forwarding from dmz --- sys/home-assistant/default.nix | 60 +++--------------------------------------- 1 file changed, 4 insertions(+), 56 deletions(-) (limited to 'sys/home-assistant/default.nix') diff --git a/sys/home-assistant/default.nix b/sys/home-assistant/default.nix index 631ba27..e997c08 100644 --- a/sys/home-assistant/default.nix +++ b/sys/home-assistant/default.nix @@ -1,58 +1,6 @@ -{ config, lib, pkgs, ... }: -with lib; let - cfg = config.local.home-assistant; -in { - options.local.home-assistant = { - enable = mkEnableOption "home-assistant"; - }; - - config = mkIf cfg.enable { - # https://nathan.gs/2024/06/22/fail2ban-to-secure-ha-on-nixos/ - environment.etc."fail2ban/filter.d/home-assistant.local".text = '' - [Definition] - failregex = ^.* \[homeassistant\.components\.http\.ban\] Login attempt or request with invalid authentication from .*$ - - ignoreregex = - - journalmatch = _SYSTEMD_UNIT=home-assistant.service + _COMM=home-assistant - - datepattern = {^LN-BEG} - ''; - - local.boot.impermanence.directories = [ - { directory = "/var/lib/hass"; user = "hass"; group = "hass"; mode = "u=rwx,g=,o="; } - ]; - - services = { - fail2ban.jails.home-assistant = { }; - - home-assistant = { - enable = true; - - extraComponents = [ - "met" - "google_translate" - "radio_browser" - "tuya" - "xiaomi_miio" - ]; - - config = { - # Includes dependencies for a basic setup - # https://www.home-assistant.io/integrations/default_config/ - default_config = { }; - }; - - customComponents = with pkgs.home-assistant-custom-components; [ - dreame_vacuum - xiaomi_miot - ]; - - customLovelaceModules = with pkgs.home-assistant-custom-lovelace-modules; [ - xiaomi-vacuum-map-card - ]; - }; - }; - }; + imports = [ + ./hass.nix + ./yaml-extra.nix + ]; } -- cgit v1.2.3