mirrors_public/oddlama_nix-config
1
1
Fork 1
mirror of https://github.com/oddlama/nix-config.git synced 2025-10-10 23:00:39 +02:00
Code Activity

chore: allow home assistant access from devices VLAN for voice PE

Browse source
This commit is contained in:
oddlama 2025-02-18 14:33:07 +01:00
parent 2406dddd8e
commit e580cd5885
No known key found for this signature in database
GPG key ID: 14EFE510775FE39A
2 changed files with 23 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
hosts/sausebiene/home-assistant.nix
View file

@ -33,6 +33,11 @@ in
# network = "internet"; # network = "internet";
# }; # };
services.matter-server = {
enable = true;
logLevel = "debug";
};
topology.self.services.home-assistant.info = "https://${homeassistantDomain}"; topology.self.services.home-assistant.info = "https://${homeassistantDomain}";
services.home-assistant = { services.home-assistant = {
enable = true; enable = true;
@ -226,6 +231,8 @@ in
extraConfig = '' extraConfig = ''
allow ${globals.net.home-lan.vlans.home.cidrv4}; allow ${globals.net.home-lan.vlans.home.cidrv4};
allow ${globals.net.home-lan.vlans.home.cidrv6}; allow ${globals.net.home-lan.vlans.home.cidrv6};
allow ${globals.net.home-lan.vlans.devices.cidrv4};
allow ${globals.net.home-lan.vlans.devices.cidrv6};
deny all; deny all;
''; '';
}; };

16
hosts/ward/net.nix
View file

@ -171,6 +171,8 @@
proxy-home.interfaces = [ "proxy-home" ]; proxy-home.interfaces = [ "proxy-home" ];
adguardhome.ipv4Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-adguardhome.ipv4 ]; adguardhome.ipv4Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-adguardhome.ipv4 ];
adguardhome.ipv6Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-adguardhome.ipv6 ]; adguardhome.ipv6Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-adguardhome.ipv6 ];
web-proxy.ipv4Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-web-proxy.ipv4 ];
web-proxy.ipv6Addresses = [ globals.net.home-lan.vlans.services.hosts.ward-web-proxy.ipv6 ];
samba.ipv4Addresses = [ globals.net.home-lan.vlans.services.hosts.sire-samba.ipv4 ]; samba.ipv4Addresses = [ globals.net.home-lan.vlans.services.hosts.sire-samba.ipv4 ];
samba.ipv6Addresses = [ globals.net.home-lan.vlans.services.hosts.sire-samba.ipv6 ]; samba.ipv6Addresses = [ globals.net.home-lan.vlans.services.hosts.sire-samba.ipv6 ];
scanner-ads-4300n.ipv4Addresses = [ scanner-ads-4300n.ipv4Addresses = [
@ -212,6 +214,20 @@
verdict = "accept"; verdict = "accept";
}; };
# Allow access to the web proxy from the devices VLAN
access-web-proxy = {
from = [
"vlan-devices"
];
to = [ "web-proxy" ];
allowedTCPPorts = [
80
443
];
allowedUDPPorts = [ 443 ];
verdict = "accept";
};
# Allow the scanner to access samba via SFTP # Allow the scanner to access samba via SFTP
access-samba-sftp = { access-samba-sftp = {
from = [ "scanner-ads-4300n" ]; from = [ "scanner-ads-4300n" ];