95 lines
2.2 KiB
Nix
95 lines
2.2 KiB
Nix
|
{ config, pkgs, ... }:
|
||
|
|
|
||
|
|
let
|
||
|
|
#unstable-src = builtins.fetchTarball "https://github.com/NixOS/nixpkgs/archive/nixos-unstable.tar.gz";
|
||
|
|
#unstable = import unstable-src {};
|
||
|
|
unstable = import <nixos-unstable> {};
|
||
|
|
in
|
||
|
|
{
|
||
|
|
#services.home-assistant = {
|
||
|
|
# enable = true;
|
||
|
|
# applyDefaultConfig = true;
|
||
|
|
# configWritable = true;
|
||
|
|
# configDir = "/var/lib/hass";
|
||
|
|
# config = {
|
||
|
|
# default_config = {};
|
||
|
|
# met = {};
|
||
|
|
# frontend = {};
|
||
|
|
# http = {
|
||
|
|
# use_x_forwarded_for = true;
|
||
|
|
# trusted_proxies = [ "127.0.0.1" "::1" ];
|
||
|
|
# };
|
||
|
|
# "map" = {};
|
||
|
|
# cloud = {};
|
||
|
|
# mobile_app = {};
|
||
|
|
# };
|
||
|
|
|
||
|
|
# package = (unstable.home-assistant.override {
|
||
|
|
# extraComponents = [
|
||
|
|
# "accuweather"
|
||
|
|
# "cast"
|
||
|
|
# "cloud"
|
||
|
|
# "default_config"
|
||
|
|
# "esphome"
|
||
|
|
# "google"
|
||
|
|
# "google_assistant"
|
||
|
|
# "roomba"
|
||
|
|
# "synology_dsm"
|
||
|
|
# "tplink"
|
||
|
|
# "wiz"
|
||
|
|
# "zwave_js"
|
||
|
|
# ];
|
||
|
|
# extraPackages = py: with unstable.python39Packages; [
|
||
|
|
# ifaddr
|
||
|
|
# ];
|
||
|
|
# }).overrideAttrs (oldAttrs: {
|
||
|
|
# doInstallCheck = false;
|
||
|
|
# });
|
||
|
|
# openFirewall = true;
|
||
|
|
#};
|
||
|
|
|
||
|
|
virtualisation.podman.enable = true;
|
||
|
|
|
||
|
|
virtualisation.oci-containers = {
|
||
|
|
backend = "podman";
|
||
|
|
containers."home-assistant" = {
|
||
|
|
image = "ghcr.io/home-assistant/home-assistant:stable";
|
||
|
|
ports = [ "127.0.0.1:8123:8123" ];
|
||
|
|
volumes = [ "/var/lib/hass:/config" ];
|
||
|
|
extraOptions = [
|
||
|
|
"--network" "podman"
|
||
|
|
"--network" "podman66:ip=192.168.66.193"
|
||
|
|
];
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
#systemd.services.podman66 = {
|
||
|
|
#wantedBy = [ "podman-home-assistant.service" ];
|
||
|
|
#serviceConfig = {
|
||
|
|
#Type = "oneshot";
|
||
|
|
#ExecStart = ''
|
||
|
|
#${pkgs.podman}/bin/podman network create -d macvlan -o parent=vlan66 --subnet 192.168.66.0/24 --ip-range 192.168.66.192/26 --gateway 192.168.66.1 podman66 || true
|
||
|
|
#'';
|
||
|
|
#};
|
||
|
|
#};
|
||
|
|
|
||
|
|
services.nginx = {
|
||
|
|
enable= true;
|
||
|
|
virtualHosts."smart.thehellings.lan".locations."/" = {
|
||
|
|
proxyPass = "http://127.0.0.1:8123";
|
||
|
|
extraConfig = ''
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_http_version 1.1;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header Upgrade $http_upgrade;
|
||
|
|
proxy_set_header Connection $connection_upgrade;
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
networking.firewall = {
|
||
|
|
enable = true;
|
||
|
|
allowedTCPPorts = [ 80 8123 ];
|
||
|
|
};
|
||
|
|
}
|