systems/brain/services/home_assistant.nix

@@ -1,5 +1,7 @@
 { pkgs, ... }:
 {
+  networking.firewall.allowedTCPPorts = [ 8123 ];
+
   users = {
     users.hass = {
       isSystemUser = true;
@@ -11,9 +13,7 @@
   services = {
     home-assistant = {
       enable = true;
-      openFirewall = true;
       config = {
-        http.server_port = 8123;
         homeassistant = {
           time_zone = "America/New_York";
           unit_system = "us_customary";