litelotus/.nix
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: add heimdallr home automation host (HA + MA + OTBR + Matter + angie) #11

Merged
litelotus merged 2 commits from feat/heimdallr-home-automation into main 2026-09-04 16:31:47 +00:00
Conversation 0 Commits 2 Files changed 13 +309 -83
litelotus commented 2026-09-04 16:21:55 +00:00
Owner
Copy link

Adds NixOS host heimdallr (192.168.1.125) as a home-automation server:

  • Home Assistant — ZHA (Zigbee via nRF52840 dongle, ZBOSS NCP v2.9.0 / zigpy-zboss), Thread via OTBR integration, Matter
  • Music Assistant — module defaults, angie-proxied
  • OpenThread Border Router — second nRF52840 dongle as RCP (ot-rcp release-2026-09), REST 8081 local, web UI 8082
  • Matter — matter-server (fabric controller, ws://127.0.0.1:5580) + home-assistant-matter-hub (bridge; ha-matter-token agenix secret is a PLACEHOLDER, must be filled with a HA long-lived token after first boot)
  • angie (nginx fork) — plain HTTP LAN-only, vhosts ha/music/otbr on :80; allowed via permittedInsecurePackages (nixpkgs marks it insecure)
  • Static networking enp3s0, limine + secure boot via shared module
  • IPv6 enabled (OTBR module hard-sets enableIPv6 + forwarding sysctls)
  • agenix secrets rekeyed with heimdallr host key; new ha-matter-token secret

Both nRF52840 dongles flashed (ZBOSS NCP + ot-rcp). Config dry-builds clean. No deploy — manual switch on heimdallr.

Adds NixOS host `heimdallr` (192.168.1.125) as a home-automation server: - **Home Assistant** — ZHA (Zigbee via nRF52840 dongle, ZBOSS NCP v2.9.0 / zigpy-zboss), Thread via OTBR integration, Matter - **Music Assistant** — module defaults, angie-proxied - **OpenThread Border Router** — second nRF52840 dongle as RCP (ot-rcp release-2026-09), REST 8081 local, web UI 8082 - **Matter** — matter-server (fabric controller, ws://127.0.0.1:5580) + home-assistant-matter-hub (bridge; ha-matter-token agenix secret is a PLACEHOLDER, must be filled with a HA long-lived token after first boot) - **angie** (nginx fork) — plain HTTP LAN-only, vhosts ha/music/otbr on :80; allowed via permittedInsecurePackages (nixpkgs marks it insecure) - Static networking enp3s0, limine + secure boot via shared module - IPv6 enabled (OTBR module hard-sets enableIPv6 + forwarding sysctls) - agenix secrets rekeyed with heimdallr host key; new ha-matter-token secret Both nRF52840 dongles flashed (ZBOSS NCP + ot-rcp). Config dry-builds clean. No deploy — manual switch on heimdallr.
feat: add heimdallr home automation host
Some checks failed
ci/crow/push/check Pipeline failed
Details
da921ff33e 
- Home Assistant with ZHA (ZBOSS NCP on nRF52840 dongle) + Thread/OTBR
- Music Assistant (angie-proxied)
- OpenThread Border Router (ot-rcp RCP on second nRF52840)
- angie reverse proxy (plain HTTP, LAN only), ha/music/otbr vhosts
- static networking on enp3s0, limine + secure boot via shared module
- rekey agenix secrets with heimdallr host key
- allow angie in permittedInsecurePackages (nixpkgs marks it insecure)
feat(heimdallr): add matter-server and home-assistant-matter-hub
Some checks failed
ci/crow/push/check Pipeline failed
Details
8ff6ca8d87 
- services.matter-server: local Matter fabric controller (HA connects via ws://127.0.0.1:5580)
- services.home-assistant-matter-hub: Matter bridge, agenix secret ha-matter-token
  (placeholder — fill with HA long-lived token after first boot, rekey, rebuild)
- IPv6: guaranteed by OTBR module (enableIPv6 + forwarding sysctls) + shared networking
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
litelotus/.nix!11
No description provided.