From c7de1294dbf8f483361ef38eedd6788e1071d045 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Motiejus=20Jak=C5=A1tys?= <motiejus@jakstys.lt>
Date: Tue, 14 Nov 2023 23:36:43 +0200
Subject: [PATCH] hass: install esphome and update firewall

---
 modules/services/hass/default.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/modules/services/hass/default.nix b/modules/services/hass/default.nix
index 9c0300b..64aee57 100644
--- a/modules/services/hass/default.nix
+++ b/modules/services/hass/default.nix
@@ -1,6 +1,7 @@
 {
   config,
   lib,
+  pkgs,
   myData,
   ...
 }: let
@@ -13,7 +14,7 @@ in {
   config = lib.mkIf cfg.enable {
     mj.services.friendlyport.ports = [
       {
-        subnets = myData.subnets.motiejus.cidrs;
+        subnets = [myData.subnets.tailscale.cidr];
         tcp = [myData.ports.hass];
       }
       {
@@ -22,6 +23,8 @@ in {
       }
     ];
 
+    environment.systemPackages = [pkgs.esphome]; # so it lands in PATH
+
     services = {
       esphome = {
         enable = true;
@@ -52,7 +55,7 @@ in {
             auth_providers = [
               {
                 type = "trusted_networks";
-                trusted_networks = [myData.subnets.tailscale.cidr];
+                trusted_networks = myData.subnets.motiejus.cidrs;
               }
             ];
           };