{ ... }:
{
  services.home-assistant = {
    enable = true;

    config = {
      default_config = { };

      http = {
        server_host = [
          "127.0.0.1"
          "::1"
        ];
        use_x_forwarded_for = true;
        trusted_proxies = [
          "127.0.0.1"
          "::1"
        ];
      };
    };
  };

  services.tailscale.serve = {
    enable = true;

    services.home.endpoints."tcp:443" = "http://127.0.0.1:8123";
  };
}