M flake.nix → flake.nix

@@ -44,6 +44,7 @@
             ./profiles/runestone/hardware-configuration.nix
             ./profiles/runestone/base.nix
             ./profiles/runestone/borg.nix
+            ./profiles/runestone/home-assistant.nix
           ];
         };
 

A profiles/runestone/home-assistant.nix

@@ -0,0 +1,28 @@
+{ ... }:
+{
+  services.home-assistant = {
+    enable = true;
+
+    config = {
+      default_config = { };
+
+      http = {
+        server_host = [
+          "127.0.0.1"
+          "::1"
+        ];
+        use_x_forwarded_for = true;
+        trusted_proxies = [
+          "127.0.0.1"
+          "::1"
+        ];
+      };
+    };
+  };
+
+  services.tailscale.serve = {
+    enable = true;
+
+    services.home.endpoints."tcp:443" = "http://127.0.0.1:8123";
+  };
+}