felschr/nixos-config
1
1
Fork 0
Code Issues Pull requests Actions Packages Projects Releases Wiki Activity

fix(rpi4): fix home-assistant config

Browse source
This commit is contained in:
Felix Schröter 2021-11-23 00:40:06 +01:00
parent c87de43103
commit e0f55dfb08
No known key found for this signature in database
GPG key ID: 910ACB9F6BD26F58
1 changed files with 40 additions and 31 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

71
services/home-assistant.nix
View file

@ -4,6 +4,7 @@ with pkgs;
let let
mqttDomain = "mqtt.${config.networking.domain}"; mqttDomain = "mqtt.${config.networking.domain}";
mqttPort = 1883;
mqttWSPort = 9001; mqttWSPort = 9001;
in { in {
# just installed for ConBee firmware updates # just installed for ConBee firmware updates
@ -23,47 +24,55 @@ in {
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
locations."/" = { locations."/" = {
proxyPass = "http://localhost:8123"; proxyPass =
"http://localhost:${toString config.services.home-assistant.port}";
proxyWebsockets = true; proxyWebsockets = true;
}; };
}; };
}; };
}; };
networking.firewall.allowedTCPPorts = [ mqttWSPort ]; networking.firewall.allowedTCPPorts = [ mqttPort ];
services.mosquitto = { services.mosquitto = {
enable = true; enable = true;
listeners = [{ listeners = [
port = mqttWSPort; {
settings.protocol = "websockets"; port = mqttPort;
users = { users = {
"hass" = { "hass" = {
acl = [ acl = [
"readwrite homeassistant/#" "readwrite homeassistant/#"
"readwrite tasmota/#" "readwrite tasmota/#"
"readwrite owntracks/#" "readwrite owntracks/#"
]; ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/hass"; hashedPasswordFile = "/etc/nixos/secrets/mqtt/hass";
};
"tasmota" = {
acl = [ "readwrite tasmota/#" "readwrite homeassistant/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/tasmota";
};
"owntracks" = {
acl = [ "readwrite owntracks/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/owntracks";
};
}; };
"tasmota" = { }
acl = [ "readwrite tasmota/#" "readwrite homeassistant/#" ]; {
hashedPasswordFile = "/etc/nixos/secrets/mqtt/tasmota"; port = mqttWSPort;
settings.protocol = "websockets";
users = {
"felix" = {
acl = [ "read owntracks/#" "readwrite owntracks/felix/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/felix";
};
"birgit" = {
acl = [ "read owntracks/#" "readwrite owntracks/birgit/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/birgit";
};
}; };
"owntracks" = { }
acl = [ "readwrite owntracks/#" ]; ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/owntracks";
};
"felix" = {
acl = [ "read owntracks/#" "readwrite owntracks/felix/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/felix";
};
"birgit" = {
acl = [ "read owntracks/#" "readwrite owntracks/birgit/#" ];
hashedPasswordFile = "/etc/nixos/secrets/mqtt/birgit";
};
};
}];
}; };
services.home-assistant = { services.home-assistant = {
@ -105,7 +114,7 @@ in {
}; };
mqtt = { mqtt = {
broker = "localhost"; broker = "localhost";
port = mqttWSPort; port = mqttPort;
username = "hass"; username = "hass";
password = "!secret mqtt_password"; password = "!secret mqtt_password";
discovery = true; discovery = true;