gensokyo-zone/infrastructure
1
0
Fork 0
mirror of https://github.com/gensokyo-zone/infrastructure.git synced 2026-02-09 04:19:19 -08:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore(z2m): local access

Browse source
This commit is contained in:
arcnmx 2024-03-20 17:01:59 -07:00
parent b61e08250f
commit c37901e4d0
3 changed files with 35 additions and 27 deletions
Download patch file Download diff file Expand all files Collapse all files

20
systems/hakurei/nixos.nix
View file

@ -11,7 +11,7 @@
tei = access.nixosFor "tei";
inherit (mediabox.services) plex;
inherit (keycloak.services) vouch-proxy;
inherit (tei.services) home-assistant;
inherit (tei.services) home-assistant zigbee2mqtt;
inherit (config.services) nginx tailscale;
in {
imports = let
@ -39,6 +39,7 @@ in {
nixos.access.unifi
nixos.access.kitchencam
nixos.access.home-assistant
nixos.access.zigbee2mqtt
nixos.access.grocy
nixos.access.proxmox
nixos.access.plex
@ -83,6 +84,14 @@ in {
virtualHosts.home-assistant'local.allServerNames
];
};
zigbee2mqtt = {
inherit (nginx) group;
domain = virtualHosts.zigbee2mqtt.serverName;
extraDomainNames = mkMerge [
virtualHosts.zigbee2mqtt.serverAliases
virtualHosts.zigbee2mqtt'local.allServerNames
];
};
grocy = {
inherit (nginx) group;
domain = virtualHosts.grocy.serverName;
@ -215,13 +224,20 @@ in {
vouch'tail = mkIf tailscale.enable {
ssl.cert.name = "vouch";
};
home-assistant = {
home-assistant = assert home-assistant.enable; {
# not the real hass record-holder, so don't respond globally..
local.denyGlobal = true;
ssl.cert.name = "home-assistant";
locations."/".proxyPass = "http://${tei.lib.access.hostnameForNetwork.tail}:${toString home-assistant.config.http.server_port}";
};
home-assistant'local.ssl.cert.name = "home-assistant";
zigbee2mqtt = assert zigbee2mqtt.enable; {
# not the real z2m record-holder, so don't respond globally..
local.denyGlobal = true;
ssl.cert.name = "zigbee2mqtt";
locations."/".proxyPass = "http://${tei.lib.access.hostnameForNetwork.tail}:${toString zigbee2mqtt.settings.frontend.port}";
};
zigbee2mqtt'local.ssl.cert.name = "zigbee2mqtt";
grocy = {
# not the real grocy record-holder, so don't respond globally..
local.denyGlobal = true;