❄️ Nix configurations
add hass
+235
-12
+146
flake.lock
+146
flake.lock
···
1
+
{
2
+
"nodes": {
3
+
"agenix": {
4
+
"inputs": {
5
+
"darwin": "darwin",
6
+
"home-manager": "home-manager",
7
+
"nixpkgs": [
8
+
"nixpkgs"
9
+
],
10
+
"systems": "systems"
11
+
},
12
+
"locked": {
13
+
"lastModified": 1747514353,
14
+
"narHash": "sha256-E1WjB+zvDw4x058mg3MIdK5j2huvnNpTEEt2brhg2H8=",
15
+
"owner": "ryantm",
16
+
"repo": "agenix",
17
+
"rev": "6697e8babbd8f323dfd5e28f160a0128582c128b",
18
+
"type": "github"
19
+
},
20
+
"original": {
21
+
"owner": "ryantm",
22
+
"repo": "agenix",
23
+
"type": "github"
24
+
}
25
+
},
26
+
"darwin": {
27
+
"inputs": {
28
+
"nixpkgs": [
29
+
"agenix",
30
+
"nixpkgs"
31
+
]
32
+
},
33
+
"locked": {
34
+
"lastModified": 1744478979,
35
+
"narHash": "sha256-dyN+teG9G82G+m+PX/aSAagkC+vUv0SgUw3XkPhQodQ=",
36
+
"owner": "lnl7",
37
+
"repo": "nix-darwin",
38
+
"rev": "43975d782b418ebf4969e9ccba82466728c2851b",
39
+
"type": "github"
40
+
},
41
+
"original": {
42
+
"owner": "lnl7",
43
+
"ref": "master",
44
+
"repo": "nix-darwin",
45
+
"type": "github"
46
+
}
47
+
},
48
+
"disko": {
49
+
"inputs": {
50
+
"nixpkgs": [
51
+
"nixpkgs"
52
+
]
53
+
},
54
+
"locked": {
55
+
"lastModified": 1747274630,
56
+
"narHash": "sha256-87RJwXbfOHyzTB9LYagAQ6vOZhszCvd8Gvudu+gf3qo=",
57
+
"owner": "nix-community",
58
+
"repo": "disko",
59
+
"rev": "ec7c109a4f794fce09aad87239eab7f66540b888",
60
+
"type": "github"
61
+
},
62
+
"original": {
63
+
"owner": "nix-community",
64
+
"repo": "disko",
65
+
"type": "github"
66
+
}
67
+
},
68
+
"home-manager": {
69
+
"inputs": {
70
+
"nixpkgs": [
71
+
"agenix",
72
+
"nixpkgs"
73
+
]
74
+
},
75
+
"locked": {
76
+
"lastModified": 1745494811,
77
+
"narHash": "sha256-YZCh2o9Ua1n9uCvrvi5pRxtuVNml8X2a03qIFfRKpFs=",
78
+
"owner": "nix-community",
79
+
"repo": "home-manager",
80
+
"rev": "abfad3d2958c9e6300a883bd443512c55dfeb1be",
81
+
"type": "github"
82
+
},
83
+
"original": {
84
+
"owner": "nix-community",
85
+
"repo": "home-manager",
86
+
"type": "github"
87
+
}
88
+
},
89
+
"nixos-hardware": {
90
+
"locked": {
91
+
"lastModified": 1747129300,
92
+
"narHash": "sha256-L3clA5YGeYCF47ghsI7Tcex+DnaaN/BbQ4dR2wzoiKg=",
93
+
"owner": "NixOS",
94
+
"repo": "nixos-hardware",
95
+
"rev": "e81fd167b33121269149c57806599045fd33eeed",
96
+
"type": "github"
97
+
},
98
+
"original": {
99
+
"owner": "NixOS",
100
+
"repo": "nixos-hardware",
101
+
"type": "github"
102
+
}
103
+
},
104
+
"nixpkgs": {
105
+
"locked": {
106
+
"lastModified": 1747467164,
107
+
"narHash": "sha256-JBXbjJ0t6T6BbVc9iPVquQI9XSXCGQJD8c8SgnUquus=",
108
+
"owner": "NixOS",
109
+
"repo": "nixpkgs",
110
+
"rev": "3fcbdcfc707e0aa42c541b7743e05820472bdaec",
111
+
"type": "github"
112
+
},
113
+
"original": {
114
+
"owner": "NixOS",
115
+
"ref": "nixpkgs-unstable",
116
+
"repo": "nixpkgs",
117
+
"type": "github"
118
+
}
119
+
},
120
+
"root": {
121
+
"inputs": {
122
+
"agenix": "agenix",
123
+
"disko": "disko",
124
+
"nixos-hardware": "nixos-hardware",
125
+
"nixpkgs": "nixpkgs"
126
+
}
127
+
},
128
+
"systems": {
129
+
"locked": {
130
+
"lastModified": 1681028828,
131
+
"narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
132
+
"owner": "nix-systems",
133
+
"repo": "default",
134
+
"rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
135
+
"type": "github"
136
+
},
137
+
"original": {
138
+
"owner": "nix-systems",
139
+
"repo": "default",
140
+
"type": "github"
141
+
}
142
+
}
143
+
},
144
+
"root": "root",
145
+
"version": 7
146
+
}
+3
-12
hosts/polecat/configuration.nix
+3
-12
hosts/polecat/configuration.nix
···
9
9
imports = [
10
10
./hardware-configuration.nix
11
11
../../modules/nixos/common/i18n.nix
12
+
../../modules/nixos/server/traefik.nix
13
+
../../modules/nixos/server/home-assistant.nix
12
14
];
13
15
14
16
age.secrets."passwd".file = ../../secrets/common/passwd.age;
···
23
25
hostName = "polecat";
24
26
networkmanager.enable = true;
25
27
domain = "otter.place";
26
-
useDHCP = false;
27
-
interfaces.enp1s0 = {
28
-
useDHCP = false;
29
-
ipv4.addresses = [
30
-
{
31
-
address = "192.168.1.50";
32
-
prefixLength = 24;
33
-
}
34
-
];
35
-
};
36
-
defaultGateway = "192.168.1.1";
37
-
nameservers = [ "192.168.1.1" "1.1.1.1" ];
28
+
useDHCP = lib.mkForce true;
38
29
};
39
30
40
31
time.timeZone = "Europe/Paris";
+27
modules/nixos/server/home-assistant.nix
+27
modules/nixos/server/home-assistant.nix
···
1
+
{ pkgs, config, ... }:
2
+
3
+
{
4
+
virtualisation.oci-containers = {
5
+
backend = "podman";
6
+
containers.homeassistant = {
7
+
volumes = [ "home-assistant:/config" ];
8
+
environment.TZ = "Europe/Paris";
9
+
# Note: The image will not be updated on rebuilds, unless the version label changes
10
+
image = "ghcr.io/home-assistant/home-assistant:2025.5.2";
11
+
autoStart = true;
12
+
extraOptions = [
13
+
"--network=host"
14
+
"--device=/dev/ttyUSB0:/dev/ttyUSB0"
15
+
];
16
+
};
17
+
};
18
+
19
+
services.traefik.dynamicConfigOptions.http = {
20
+
routers.hass = {
21
+
entryPoints = ["websecure"];
22
+
service = "hass";
23
+
rule = "Host(`home.otter.place`)";
24
+
};
25
+
services.hass.loadBalancer.servers = [{url = "http://localhost:8123";}];
26
+
};
27
+
}
+49
modules/nixos/server/traefik.nix
+49
modules/nixos/server/traefik.nix
···
1
+
{ pkgs, config, ... }:
2
+
3
+
{
4
+
age.secrets."cloudflare-traefik.env".file = ../../secrets/common/cloudflare-traefik.env.age;
5
+
6
+
services.traefik = {
7
+
enable = true;
8
+
9
+
staticConfigOptions = {
10
+
entryPoints = {
11
+
web = {
12
+
address = ":80";
13
+
asDefault = true;
14
+
http.redirections.entrypoint = {
15
+
to = "websecure";
16
+
scheme = "https";
17
+
};
18
+
};
19
+
20
+
websecure = {
21
+
address = ":443";
22
+
asDefault = true;
23
+
http.tls.certResolver = "letsencrypt";
24
+
};
25
+
};
26
+
27
+
log = {
28
+
level = "INFO";
29
+
filePath = "${config.services.traefik.dataDir}/traefik.log";
30
+
format = "json";
31
+
};
32
+
33
+
certificatesResolvers.letsencrypt.acme = {
34
+
email = "alex@otter.foo";
35
+
storage = "${config.services.traefik.dataDir}/acme.json";
36
+
dnschallenge.provider = "cloudflare";
37
+
};
38
+
39
+
api.dashboard = false;
40
+
};
41
+
42
+
dynamicConfigOptions = {
43
+
http.routers = {};
44
+
http.services = {};
45
+
};
46
+
};
47
+
48
+
systemd.services.traefik.serviceConfig.EnvironmentFile = [config.age.secrets."cloudflare-traefik.env".path];
49
+
}
+9
secrets/common/cloudflare-traefik.env.age
+9
secrets/common/cloudflare-traefik.env.age
···
1
+
age-encryption.org/v1
2
+
-> ssh-ed25519 eJaLeQ LLUTYC+ekESSJ4C2vriCF5C+7mkKPbwV3XswScf+Unc
3
+
5b3elAC4IXlzAZro4n4ccDN//DWaeh7x5Z/n3H3Dg84
4
+
-> ssh-ed25519 PCx17Q tjbDRbNb4mmTDIdlAfGAFZLo2eyAt/w/7PaVkcvuW24
5
+
AP/q1OXywWx4cHivo4I5qajgAyhlIfbpkYvX28EW5go
6
+
-> ssh-ed25519 Z6U4Gw hEihGotHJWqqyqZT6an98xX6Nmu8K5REwPuPIBEgszc
7
+
Ifu634nS0z0F4u5nnbbfQmXSMFy6JYb5ykiYKA68vrs
8
+
--- suW2avpCtzYIi82hrWBWdcmNj1wonwvgE6bTO0UfLyQ
9
+
����گ;f���(���Ds'��"���C8 mz�ܰ�L�4v�"��� #):���Q�7\B�D� �,�x(���3�O~OD�Y���C_�
+1
secrets/secrets.nix
+1
secrets/secrets.nix