diff --git a/rpi4.nix b/rpi4.nix
index 1a07661..7552cf2 100644
--- a/rpi4.nix
+++ b/rpi4.nix
@@ -46,6 +46,7 @@ in with builtins; {
   networking.domain = "home.felschr.com";
 
   networking.firewall.allowedTCPPorts = [ 80 443 ];
+  networking.firewall.allowedUDPPorts = [ 80 443 ];
 
   security.acme = {
     acceptTerms = true;
@@ -60,6 +61,7 @@ in with builtins; {
       "*.home.felschr.com"
       "home.felschr.com"
       "media.felschr.com"
+      "mqtt.felschr.com"
       "owntracks.felschr.com"
       "etebase.felschr.com"
     ];
diff --git a/services/home-assistant.nix b/services/home-assistant.nix
index eac4cf8..7807d2e 100644
--- a/services/home-assistant.nix
+++ b/services/home-assistant.nix
@@ -71,6 +71,11 @@ in {
   services.home-assistant = {
     enable = true;
     openFirewall = true;
+    package = (pkgs.home-assistant.overrideAttrs (oldAttrs: rec {
+      # pytestCheckPhase uses too much RAM and pi can't handle it
+      doCheck = false;
+      doInstallCheck = false;
+    })).override { extraComponents = [ "otp" ]; };
     config = {
       homeassistant = {
         name = "Home";