daniel/dotfiles
1
0
Fork 0
Code Activity Actions

mediaserver: update config

Browse source
This commit is contained in:
Daniel Kempkens 2024-09-01 14:19:15 +02:00
parent adee1c5f81
commit 635d20815a
Signed by: daniel
SSH key fingerprint: SHA256:Ks/MyhQYcPRQiwMKLAKquWCdCPe3JXlb1WttgnAoSeM
2 changed files with 46 additions and 34 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
agenix/hosts/mediaserver/wireguard/config.age
View file

Binary file not shown.

80
system/nixos/weewx-proxy.nix
View file

@ -17,43 +17,55 @@
};
};
services.mosquitto.listeners = [
{
address = "0.0.0.0";
port = 1883;
services.mosquitto = {
listeners = [
{
address = "0.0.0.0";
port = 1883;
settings = {
protocol = "mqtt";
};
users = {
rtl = {
password = "didYouFindThis";
acl = [ "write rtl433" ];
};
deye = {
password = "didYouFindThis";
acl = [ "write deye/#" ];
};
bitshake = {
password = "didYouFindThis";
acl = [ "write bitshake/#" ];
};
weewx-proxy = {
hashedPasswordFile = config.age.secrets.mosquitto-password-weewx-proxy.path;
acl = [ "read rtl433" "read deye/#" "read bitshake/#" "write hadata/#" ];
};
home-assistant = {
passwordFile = config.age.secrets.mosquitto-password-home-assistant.path;
acl = [ "readwrite #" ];
};
};
}
];
bridges.home-assistant = {
addresses = [{ address = "10.0.0.230"; port = 1883; }];
settings = {
protocol = "mqtt";
remote_username = "mqtt_bridge";
remote_password = "verySecurePassword";
try_private = true;
};
users = {
rtl = {
password = "didYouFindThis";
acl = [ "write rtl433" ];
};
deye = {
password = "didYouFindThis";
acl = [ "write deye/#" ];
};
bitshake = {
password = "didYouFindThis";
acl = [ "write bitshake/#" ];
};
weewx-proxy = {
hashedPasswordFile = config.age.secrets.mosquitto-password-weewx-proxy.path;
acl = [ "read rtl433" "read deye/#" "read bitshake/#" "write hadata/#" ];
};
home-assistant = {
passwordFile = config.age.secrets.mosquitto-password-home-assistant.path;
acl = [ "readwrite #" ];
};
};
}
];
topics = [ "hadata/# out" "deye/# out" ];
};
};
networking.firewall.interfaces =
let