nixos/home-assistant: fix openFirewall

2 years ago · ccf42c7987
parent 5ddae4097c
commit ccf42c7987
1 changed files with 8 additions and 1 deletions
--- a/nixos/modules/services/home-automation/home-assistant.nix
+++ b/nixos/modules/services/home-automation/home-assistant.nix
@ -360,7 +360,14 @@ in {
  };

  config = mkIf cfg.enable {
-    networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ cfg.port ];
+    assertions = [
+      {
+        assertion = cfg.openFirewall -> !isNull cfg.config;
+        message = "openFirewall can only be used with a declarative config";
+      }
+    ];
+
+    networking.firewall.allowedTCPPorts = mkIf cfg.openFirewall [ cfg.config.http.server_port ];

    systemd.services.home-assistant = {
      description = "Home Assistant";