🔧 [pi4] Temporary disable Actual budget

hosts/pi4/actual.nix

@@ -5,7 +5,7 @@ let
 in
 {
   networking.nat = {
-    enable = true;
+    enable = false;
     internalInterfaces = [ "ve-*" ];
     externalInterface = "wlan0";
     # Lazy IPv6 connectivity for the container
@@ -13,7 +13,7 @@ in
   };
 
   containers.actual = {
-    autoStart = true;
+    autoStart = false;
     privateNetwork = true;
     hostAddress = "192.168.10.188";
     localAddress = "192.168.10.11";
@@ -23,7 +23,7 @@ in
         networking.firewall.allowedTCPPorts = [ port ];
         services = {
           actual = {
-            enable = true;
+            enable = false;
             settings = {
               inherit port;
               loginMethod = "password";

hosts/pi4/home-assitant.nix

@@ -6,11 +6,18 @@ let
 in
 {
 
-  services.home-assistant = {
+  services = {
+    home-assistant = {
       enable = true;
       package =
         (pkgs.home-assistant.override {
-        extraPackages = py: with py; [ psycopg2 ];
+          extraPackages =
+            py: with py; [
+              # Postgres
+              psycopg2
+              # Roomba
+              roombapy
+            ];
         }).overrideAttrs
           (oldAttrs: {
             # Avoid long install checks
@@ -41,7 +48,7 @@ in
       };
     };
 
-  services.nginx.virtualHosts.${domain} = {
+    nginx.virtualHosts.${domain} = {
       forceSSL = true;
       enableACME = true;
       extraConfig = ''
@@ -52,7 +59,7 @@ in
         proxyWebsockets = true;
       };
     };
-  services.postgresql = {
+    postgresql = {
       enable = true;
       ensureDatabases = [ dbName ];
       ensureUsers = [
@@ -62,4 +69,5 @@ in
         }
       ];
     };
+  };
 }

hosts/pi4/security/default.nix

@@ -1,7 +1,22 @@
+{ systemConfig, ... }:
+
 {
   imports = [
     ./firewall.nix
   ];
 
+  security.sudo.extraRules = [
+    {
+      users = [ systemConfig.username ];
+      runAs = "ALL:ALL";
+      commands = [
+        {
+          command = "ALL";
+          options = [ "NOPASSWD" ];
+        }
+      ];
+    }
+  ];
+
   services.pcscd.enable = true;
 }