🏠 initial home-assistant setup

hosts/plato/configuration.nix

@@ -9,6 +9,7 @@ in {
     <home-manager/nixos>
 
     ../../modules/coredns
+    ../../modules/home-assistant
     ../../modules/matrix
   ];
 

hosts/socrates/configuration.nix

@@ -10,6 +10,7 @@ in {
     <home-manager/nixos>
 
     ../../modules/coredns
+    ../../modules/home-assistant/nginx.nix
     ../../modules/matrix/nginx.nix
   ];
 

modules/home-assistant/default.nix

@@ -0,0 +1,15 @@
+{ config, lib, pkgs, ... }:
+
+{
+  # Use the docker container because it's officially supported.
+  virtualisation.oci-containers = {
+    containers = {
+      home-assistant = {
+        image = "ghcr.io/home-assistant/home-assistant:2021.7.2";
+        volumes =
+          [ "/var/lib/hass:/config" "/etc/localtime:/etc/localtime:ro" ];
+        extraOptions = [ "--privileged" "--network=host" ];
+      };
+    };
+  };
+}

modules/home-assistant/nginx.nix

@@ -0,0 +1,17 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services.nginx = {
+    enable = true;
+    virtualHosts = {
+      "hass.nerdhaus.ca" = {
+        forceSSL = true;
+        enableACME = true;
+        locations."/" = {
+          proxyPass = "http://plato:8123";
+          proxyWebsockets = true;
+        };
+      };
+    };
+  };
+}

modules/home-assistant/postgresql.nix

@@ -0,0 +1,13 @@
+{ config, lib, pkgs, ... }:
+
+{
+  services = {
+    postgresql = {
+      ensureDatabases = [ "hass" ];
+      ensureUsers = [{
+        name = "hass";
+        ensurePermissions = { "DATABASE hass" = "ALL PRIVILEGES"; };
+      }];
+    };
+  };
+}