allowed (non-nix) home assistant to be acessed from outside.

hosts/rockhole64/adguard.nix

@@ -10,7 +10,7 @@
     mutableSettings = true;
     allowDHCP = true;
     openFirewall=true;
-    port=80;
+    port=8080;
   };
   networking.firewall.allowedUDPPorts=[53 67 546 547];
 }

hosts/rockhole64/default.nix

@@ -12,6 +12,7 @@ inputs.nixpkgs.lib.nixosSystem {
     ./disk-config.nix
     ./hardware-config.nix
     ./adguard.nix
+    ./nginx.nix
     ../../configs/nixos/common.nix
     ../../configs/nixos/sshd.nix
     ../../configs/nixos/secrets.nix

hosts/rockhole64/nginx.nix

@@ -0,0 +1,21 @@
+{
+  inputs,
+  config,
+  pkgs,
+  lib,
+  ...
+}: {
+  imports = [
+    ../../configs/nixos/nginx.nix
+  ];
+
+  # For non-nix home assistant.
+  services.nginx.virtualHosts."home.venberg.xyz" = {
+    enableACME = true;
+    forceSSL = true;
+    locations."/" = {
+      proxyPass = "http://10.10.0.3:8123";
+      proxyWebsockets = true;
+    };
+  };
+}