fireproof/nixos
1
0
Fork 0
mirror of https://github.com/nickolaj-jepsen/nixos.git synced 2026-01-22 08:06:50 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

feat(home-assistant): store long-lat in age secret

Browse source
This commit is contained in:
Nickolaj Jepsen 2025-10-18 12:07:00 +02:00
parent 713853108c
commit 3b9006077e
3 changed files with 21 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

19
hosts/homelab/home-assistant.nix
View file

@ -17,6 +17,13 @@ in {
mosquitto-zigbee2mqtt.rekeyFile = ../../secrets/hosts/homelab/mosquitto-zigbee2mqtt.age; mosquitto-zigbee2mqtt.rekeyFile = ../../secrets/hosts/homelab/mosquitto-zigbee2mqtt.age;
mosquitto-sas.rekeyFile = ../../secrets/hosts/homelab/mosquitto-sas.age; mosquitto-sas.rekeyFile = ../../secrets/hosts/homelab/mosquitto-sas.age;
mosquitto-ha.rekeyFile = ../../secrets/hosts/homelab/mosquitto-ha.age; mosquitto-ha.rekeyFile = ../../secrets/hosts/homelab/mosquitto-ha.age;
hassSecrets = {
rekeyFile = ../../secrets/hosts/homelab/hass.yaml.age;
path = "${config.services.home-assistant.configDir}/secrets.yaml";
mode = "400";
owner = "hass";
group = "hass";
};
}; };
networking.firewall.allowedTCPPorts = [ networking.firewall.allowedTCPPorts = [
@ -56,8 +63,8 @@ in {
home-assistant = { home-assistant = {
enable = true; enable = true;
package = pkgsUnstable.home-assistant; package = pkgs.home-assistant;
customComponents = with pkgsUnstable.home-assistant-custom-components; [ customComponents = with pkgs.home-assistant-custom-components; [
adaptive_lighting adaptive_lighting
sleep_as_android sleep_as_android
(pkgs.buildHomeAssistantComponent rec { (pkgs.buildHomeAssistantComponent rec {
@ -86,9 +93,9 @@ in {
config = { config = {
homeassistant = { homeassistant = {
name = "Home"; name = "Home";
latitude = "56.2"; latitude = "!secret latitude";
longitude = "10.2"; longitude = "!secret longitude";
elevation = "0"; elevation = "!secret elevation";
unit_system = "metric"; unit_system = "metric";
time_zone = "Europe/Copenhagen"; time_zone = "Europe/Copenhagen";
}; };
@ -102,7 +109,7 @@ in {
"127.0.0.1" "127.0.0.1"
"::1" "::1"
]; ];
base_url = "https://ha.nickolaj.com"; # base_url = "https://ha.nickolaj.com";
}; };
automation = "!include automations.yaml"; automation = "!include automations.yaml";

8
secrets/hosts/homelab/.rekey/89aac8fd4d365506669c2d35e6d3abc5-hassSecrets.age Normal file
View file

@ -0,0 +1,8 @@
age-encryption.org/v1
-> ssh-ed25519 uxq+Zw reTHDLwj8jaI7giq5hw77+cvVurKP2vR8KeonjAJ+nY
Pe6Df2WQawEnCp5GVCzegzEJaK868bhwZm2hEEwAc/I
-> 6`Rk-grease K=O ttrh.^ [o4vdGR
9xDUT+18cwMzzTgWlQzWBAniL9GAv+e4rmhwu3Vdwdh/mBeXJdfgEMxTqyRZk9TX
BSW+CifV9iGZXmYm9b+NzKwWJUQ
--- /NXPE/9QIghJoaXFNtmPMvs78dD2RdXbDWiBnwgXIzo
£‹äÂe’Û•r³ü12„G­ªˆ ¸[îsM[#¶Ô<C2B6>±ª,»ÁI< ö<>ÿ*~aýÎY³vYX½éŽOQÒøKÎ:°#g&:£õmÖHÀççK‹Ç· žEZ·-þúpjËà˜Ý!¿]

BIN
secrets/hosts/homelab/hass.yaml.age Normal file
View file

Binary file not shown.