+3 -3

configs/gg23.nix

View file Reviewed

··· 69 69 }; 70 70 } 71 71 { 72 72 - # styx (et0), ex-router: snapserver, mosquitto, mycelium peer 72 72 + # styx (et0), ex-router: snapserver, mycelium peer 73 73 dhcpServerStaticLeaseConfig = { 74 74 Address = "10.42.0.3"; 75 75 MACAddress = "3c:7c:3f:7e:e2:39"; ··· 131 131 132 132 environment.systemPackages = [ 133 133 (pkgs.writers.writeDashBin "restart_router" '' 134 134 - ${pkgs.mosquitto}/bin/mosquitto_pub -h 10.42.0.3 -t 'cmnd/router/POWER' -u gg23 -P gg23-mqtt -m OFF 134 134 + ${pkgs.mosquitto}/bin/mosquitto_pub -h localhost -t 'cmnd/router/POWER' -u gg23 -P gg23-mqtt -m OFF 135 135 sleep 2 136 136 - ${pkgs.mosquitto}/bin/mosquitto_pub -h 10.42.0.3 -t 'cmnd/router/POWER' -u gg23 -P gg23-mqtt -m ON 136 136 + ${pkgs.mosquitto}/bin/mosquitto_pub -h localhost -t 'cmnd/router/POWER' -u gg23 -P gg23-mqtt -m ON 137 137 '') 138 138 ]; 139 139 }

+4 -10

configs/hass/default.nix

View file Reviewed

··· 4 4 ./zigbee.nix 5 5 ]; 6 6 7 7 + # Runs on the gg23 router: the LAN (int0) is a trusted interface there 8 8 + # (configs/gg23.nix), et0 is the WAN and stays closed. 7 9 networking.firewall.interfaces = { 8 8 - et0.allowedTCPPorts = [ 9 9 - 1883 # mosquitto 10 10 - 8123 # hass 11 11 - 1337 # zigbee2mqtt frontend 12 12 - ]; 13 13 - docker0.allowedTCPPorts = [ 1883 ]; # mosquitto 14 10 retiolum.allowedTCPPorts = [ 15 11 8123 # hass 16 12 1337 # zigbee2mqtt frontend ··· 53 49 ]; 54 50 }; 55 51 56 56 - services.ollama = { 57 57 - enable = true; 58 58 - openFirewall = true; 59 59 - }; 52 52 + # used by hass via localhost only; no openFirewall, et0 is the WAN here 53 53 + services.ollama.enable = true; 60 54 61 55 environment.systemPackages = [ pkgs.mosquitto ]; 62 56 }

+1 -1

configs/hass/proxy.nix

View file Reviewed

··· 5 5 locations."/" = { 6 6 recommendedProxySettings = true; 7 7 proxyWebsockets = true; 8 8 - proxyPass = "http://styx.r:8123"; 8 8 + proxyPass = "http://acheron.r:8123"; 9 9 }; 10 10 }; 11 11 }

+1

machines/acheron/config.nix

View file Reviewed

··· 8 8 ../../configs 9 9 ../../configs/retiolum.nix 10 10 ../../configs/gg23.nix 11 11 + ../../configs/hass 11 12 ]; 12 13 13 14 services.earlyoom.enable = true;

+3 -3

machines/coaxmetal/hermes.nix

View file Reviewed

··· 124 124 pkgs.openssh 125 125 ]; 126 126 127 127 - # Home Assistant (styx, configs/hass) left hermes core for the 127 127 + # Home Assistant (acheron, configs/hass) left hermes core for the 128 128 # `homeassistant` catalog plugin: the ha_* tools plus a gateway platform 129 129 # for state-change events. Pinned to the sha plugin-catalog/homeassistant.yaml 130 130 # ships; its only Python dependency, aiohttp, is already in the venv via ··· 434 434 CALDAV_USER = "hermes"; 435 435 CALDAV_CALENDAR_URL = "https://cal.lassul.us/lass/calendar/"; 436 436 437 437 - # Home Assistant on styx, over retiolum (configs/hass opens 8123 there). 438 438 - HASS_URL = "http://styx.r:8123"; 437 437 + # Home Assistant on acheron, over retiolum (configs/hass opens 8123 there). 438 438 + HASS_URL = "http://acheron.r:8123"; 439 439 440 440 # Element makes DMs end-to-end encrypted by default, so the bot must do 441 441 # E2EE or it can't read messages. The `matrix` dep group already bundles

-1

machines/styx/config.nix

View file Reviewed

··· 9 9 ../../configs/retiolum.nix 10 10 ../../configs/pipewire.nix 11 11 ../../configs/yellow-mounts/samba.nix 12 12 - ../../configs/hass 13 12 ../../configs/n8n.nix 14 13 ../../configs/green-host.nix 15 14 ../../configs/syncthing.nix

+2 -2

configs/websites/where.is.lassul.us/default.nix

View file Reviewed

··· 1 1 { config, pkgs, ... }: 2 2 let 3 3 domain = "where.is.lassul.us"; 4 4 - # home-assistant on styx, reached over retiolum (same as hass/proxy.nix). 5 5 - hass = "http://styx.r:8123"; 4 4 + # home-assistant on acheron, reached over retiolum (same as hass/proxy.nix). 5 5 + hass = "http://acheron.r:8123"; 6 6 entity = "person.lass"; 7 7 stateDir = "/var/lib/where-lassul-us"; 8 8