feat: Athena Firewall

machines/mibook/configuration.nix

@@ -10,6 +10,7 @@
     ./disks.nix
     ./hardware-configuration.nix
     ./environments.nix
+    ./network.nix
     # ./system.nix use docker here
   ];
 

machines/mibook/network.nix

@@ -0,0 +1,8 @@
+_: {
+  # Athena (local AI): allow LAN access to the Hermes web dashboard.
+  # Bound to 0.0.0.0:9119 in the athena docker stack; NixOS default-deny
+  # firewall otherwise blocks inbound connections from other devices.
+  networking.firewall.allowedTCPPorts = [
+    9119 # athena hermes dashboard
+  ];
+}

modules/environments/home-assistant/default.nix

@@ -23,23 +23,6 @@ in
     services.home-assistant = {
       enable = true;
       openFirewall = true;
-
-      # HACS-style custom components, packaged declaratively (no HACS runtime).
-      # Config-flow based: add via Settings > Devices & Services after rebuild.
-      customComponents = [
-        (pkgs.buildHomeAssistantComponent {
-          owner = "Matts-Baps";
-          domain = "sourdough";
-          version = "1.1.3";
-          src = pkgs.fetchFromGitHub {
-            owner = "Matts-Baps";
-            repo = "ha-sourdough";
-            rev = "v1.1.3";
-            hash = "sha256-Uoid/2f6GxZMuE5Keu2VjHPYuOxnYG8hsCD6BYcaTvM=";
-          };
-        })
-      ];
-
       extraComponents = [
         "matter"
         "mobile_app"