From 15e6ec0de1f5b1c2fa5f645ddc8eda0af1ad12e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Felix=20Schr=C3=B6ter?= <dev@felschr.com>
Date: Tue, 25 Oct 2022 12:08:38 +0200
Subject: [PATCH] feat(hass): add HomeKit Controller

---
 services/home-assistant.nix | 14 ++++++++------
 1 file changed, 8 insertions(+), 6 deletions(-)

diff --git a/services/home-assistant.nix b/services/home-assistant.nix
index 52baf51..79b96a7 100644
--- a/services/home-assistant.nix
+++ b/services/home-assistant.nix
@@ -27,11 +27,7 @@ in {
   services.home-assistant = {
     enable = true;
     openFirewall = true;
-    package = (pkgs.home-assistant.overrideAttrs (oldAttrs: rec {
-      # pytestCheckPhase uses too much RAM and pi can't handle it
-      doCheck = false;
-      doInstallCheck = false;
-    })).override { extraComponents = [ "otp" "roku" "sonos" "onvif" ]; };
+    extraComponents = [ "otp" "roku" "sonos" "onvif" "homekit_controller" ];
     config = {
       homeassistant = {
         name = "Home";
@@ -55,7 +51,6 @@ in {
       automation = { };
       frontend = { };
       mobile_app = { };
-      discovery = { };
       zeroconf = { };
       ssdp = { };
       shopping_list = { };
@@ -125,6 +120,13 @@ in {
     # configWritable = true; # doesn't work atm
   };
 
+  networking.firewall.allowedTCPPorts = [
+    1400 # Sonos discovery
+  ];
+  networking.firewall.allowedUDPPorts = [
+    5353 # HomeKit
+  ];
+
   age.secrets.hass-secrets = {
     file = ../secrets/hass/secrets.age;
     path = "/var/lib/hass/secrets.yaml";