nixos/home/hass: Initial Home Assistant setup

nixos/boxes/home/palace/vms/sfh/containers/hass.nix

@@ -1,6 +1,7 @@
 { lib, ... }:
 let
   inherit (lib.my) net;
+  inherit (lib.my.c) pubDomain;
   inherit (lib.my.c.home) domain prefixes vips hiMTU;
 in
 {
@@ -24,9 +25,23 @@ in
           address = net.cidr.host (65536*5+3) prefixes.hi.v6;
         };
       };
+      lo = {
+        name = "hass-ctr-lo";
+        inherit domain;
+        mtu = 1500;
+        ipv4 = {
+          address = net.cidr.host 103 prefixes.lo.v4;
+          mask = 21;
+          gateway = null;
+        };
+        ipv6 = {
+          iid = "::5:3";
+          address = net.cidr.host (65536*5+3) prefixes.lo.v6;
+        };
+      };
     };
 
-    configuration = { lib, config, pkgs, assignments, ... }:
+    configuration = { lib, config, pkgs, assignments, allAssignments, ... }:
     let
       inherit (lib) mkMerge mkIf mkForce;
       inherit (lib.my) networkdAssignment;
@@ -47,11 +62,61 @@ in
           };
         };
 
-        systemd = {
-          network.networks."80-container-host0" = networkdAssignment "host0" assignments.hi;
+        environment = {
+          systemPackages = with pkgs; [
+            usbutils
+          ];
         };
 
-        services = { };
+        systemd = {
+          network.networks = {
+            "80-container-host0" = networkdAssignment "host0" assignments.hi;
+            "80-container-lan-lo" = networkdAssignment "lan-lo" assignments.lo;
+          };
+        };
+
+        services = {
+          home-assistant = {
+            enable = true;
+            config = {
+              default_config = {};
+              homeassistant = {
+                name = "Home";
+                unit_system = "metric";
+                currency = "EUR";
+                country = "IE";
+                time_zone = "Europe/Dublin";
+                external_url = "https://hass.${pubDomain}";
+                internal_url = "http://hass-ctr.${domain}:${toString config.services.home-assistant.config.http.server_port}";
+              };
+              http = {
+                use_x_forwarded_for = true;
+                trusted_proxies = with allAssignments.middleman.internal; [
+                  ipv4.address
+                  ipv6.address
+                ];
+              };
+            };
+            extraComponents = [
+              "default_config"
+              "esphome"
+              "google_translate"
+
+              "met"
+              "zha"
+              "denonavr"
+              "webostv"
+            ];
+            extraPackages = python3Packages: with python3Packages; [
+              zlib-ng
+              isal
+
+              gtts
+            ];
+            configWritable = false;
+            openFirewall = true;
+          };
+        };
       };
     };
   };