From 3dc083c0f0f969665a8ffcd642e8946d4f9bddde Mon Sep 17 00:00:00 2001
From: Bastian de Byl <bastian@bdebyl.net>
Date: Mon, 4 Apr 2022 20:26:45 -0400
Subject: [PATCH] added home-assistant container

---
 .gitattributes                                |   2 +
 ansible/deploy_home.yml                       |   1 +
 ansible/roles/hass/files/automations.yaml     | Bin 0 -> 935 bytes
 ansible/roles/hass/files/configuration.yaml   | Bin 0 -> 413 bytes
 ansible/roles/hass/meta/main.yml              |   3 ++
 ansible/roles/hass/tasks/hass.yml             |  38 ++++++++++++++++++
 ansible/roles/hass/tasks/main.yml             |   2 +
 ansible/roles/http/defaults/main.yml          |   1 +
 ansible/roles/http/files/nginx/nginx.conf     |   5 +++
 ansible/roles/http/tasks/http.yml             |   3 ++
 .../nginx/sites/assistant.bdebyl.net.conf.j2  |  17 ++++++++
 11 files changed, 72 insertions(+)
 create mode 100644 ansible/roles/hass/files/automations.yaml
 create mode 100644 ansible/roles/hass/files/configuration.yaml
 create mode 100644 ansible/roles/hass/meta/main.yml
 create mode 100644 ansible/roles/hass/tasks/hass.yml
 create mode 100644 ansible/roles/hass/tasks/main.yml
 create mode 100644 ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2

diff --git a/.gitattributes b/.gitattributes
index e859268..bc209dd 100644
--- a/.gitattributes
+++ b/.gitattributes
@@ -1,3 +1,5 @@
 .pass.sh filter=git-crypt diff=git-crypt
 ansible/vars/vault.yml filter=git-crypt diff=git-crypt
+ansible/roles/hass/files/automations.yaml filter=git-crypt diff=git-crypt
+ansible/roles/hass/files/configuration.yaml filter=git-crypt diff=git-crypt
 *.yml linguist-detectable
diff --git a/ansible/deploy_home.yml b/ansible/deploy_home.yml
index a00d938..2c52dc5 100644
--- a/ansible/deploy_home.yml
+++ b/ansible/deploy_home.yml
@@ -10,6 +10,7 @@
   - role: pihole
   - role: http
   - role: drone
+  - role: hass
   - role: nfs
     tags: nfs
   - role: motion
diff --git a/ansible/roles/hass/files/automations.yaml b/ansible/roles/hass/files/automations.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..3f3f510486df75029de1964b7699cb65f0175317
GIT binary patch
literal 935
zcmV;Y16ce3M@dveQdv+`0B1gNbv`!fYf9WzuiVg1JOLQgqLirzEL?$`8`y>N2NBrS
zQx9||6~+7;uAx95+LhB-)*T_ixZtoo0QLRSYTmi@HR*k|3`T4@-CS8Uyrg6M8G2?w
zykdTC_KUg~J_qzogKIW|O>g-zG0)zqusZUn(b%#!YlFYMy4ny7B@jErBKLeL`K+qX
zXgXgKI%nSGOX+g!u7PKL%zC-sHVNSy-j_>Uq=QDnoZUZh__QifzXC6VSQE*=fvZX>
zRFb&`fm1RDhgk1we+0AzypG%<J=mZOaGTgE8GD8YqAJnTQ)At}FPYH;d>y_K44+E8
z#!ip)aD&`FU7;(g*$_{rTiEs)Y&2pC-`=Nts6^;MdrgOIU#A{tz2o^a-=+kHfjA^p
z-<1SPOtFB$-@9tqL*pTFf73boXkK9Mgc|6P4%WaYwnY`I&TKk%oI)EBOFOGB6F=TK
zK;qrd`{oeytpnTBHCHw$?u`f@X{WGUnGDyHVbF@Tf9qZ-Dr?Ue-+`EK><;@`YON`3
z=`Iv({6`#dFf!4;kP1qZ+px@H^+=I-4OzKPH36%!G^$%8>HSO-(y1zZXkKu?FVVL$
zGHC7cII!n)F=PT<EQw}@NG%LpCryVp=m0rj1V{(W_xQ42J2m!(Bc-z-y02i!#YaSd
zgo~4v)&QD$5LneTD!y&yw&&A<bPCtTf_<j}0KEWPyrH5;&{T0W$S|6Pih(00L2q^6
z?;m<=%v_oBuX31+oHJ=&!NR>eq@o-nk+~K;hX$d#EMnC>NU&*ilC~ptwr|*XyWl@h
zHd2{}>{IO`Ju8H_4RVu6hIKqnaoSj4Rf0Yur``Qv)g;CF<ev{+bv^+kXixk-5yBr@
z6;=X(8$8@RMVR1SW}1?Bw>PTs+*j%b#8+vNE`5*w*3+9zD`YX$-9Jma6Uhojt8mk!
zavwr-<GLFG7ut=)PZEenO`LkTG;c&lN7F4joBJ&mL-|l(Pgn2NA7!)loj2X7+IW-O
zlO!p1KN2i7SGVBw&N&%-d|JmMjBKz9YQk=Uq#%DE_D`;iM<<bQ9B`b(rL=aiRj9R2
znIC%@3W|NBE0>Gb`E|c~B~pPq9O-tz%M|MRwjmI2_3O~?%u$nxHxiFM?jd{9h3Bq6
zu0C1bh<{T6@AEu#bP|GY)k2<(M(t#d@z5Eq!_1Re+{JlqlTlaHO%Q{I)(X$D#XW2L
JwY9O(vX1gz#M=M>

literal 0
HcmV?d00001

diff --git a/ansible/roles/hass/files/configuration.yaml b/ansible/roles/hass/files/configuration.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..4f709e7966801a40b0c5781fa275e068e2f9ade6
GIT binary patch
literal 413
zcmV;O0b>3DM@dveQdv+`0D=2ixkDg^Q)kbtT5XOZ$h5~I9kaqLYoU&VK@qZcAMJVq
zpI6cip!T_F#u}2x-9{}2;DHz%2E|=&Em(ZXVq5mirhGh@jV$n_#4Y|@;dumC?kZE7
z$L(*vV8-&?q+I8$O<IOYvbVS$@kZd9{sV!{vL~><>1DokKxv8;4|W`SSTYMyEzrot
z{YU6RO}0tn?5?~>bq~m&2XaU#hKRVgd7(j?D#`_IB6r#PoMXf#p|mgZqC$9AC#YQ7
zGrT)f$ln<M8Ub`AFh&KNfU>1XTlLQEg~d{bRwcV3P~Wv^Dd1dA8vikQ*$>|O2n^!7
z?;7;|Vk#}s3T!V^%UNqi0NP7ny6BXi)(Dgc_NW^F_z+A(BM^z4T2NO=W{p1?06g0B
zi4bVEwOA*=XLq&DtGH^hD6y6jXRE})1!f|cnaN`1vA--YY%!AjwEA-*Wkuf1Lkg!V
z)9Y#ch{NEuZ_G4BL(CyM<aO7u>nnb+<lsj_{rgzRJUe63CbWCaXWlhkR`CtjA2#M)
Hdkyi&HOS0=

literal 0
HcmV?d00001

diff --git a/ansible/roles/hass/meta/main.yml b/ansible/roles/hass/meta/main.yml
new file mode 100644
index 0000000..3f81c4b
--- /dev/null
+++ b/ansible/roles/hass/meta/main.yml
@@ -0,0 +1,3 @@
+---
+dependencies:
+  - role: http
diff --git a/ansible/roles/hass/tasks/hass.yml b/ansible/roles/hass/tasks/hass.yml
new file mode 100644
index 0000000..d7476f5
--- /dev/null
+++ b/ansible/roles/hass/tasks/hass.yml
@@ -0,0 +1,38 @@
+---
+- name: create home-assistant host directory volumes
+  become: true
+  file:
+    path: "{{ item }}"
+    state: directory
+  with_items:
+    - /usr/share/hass
+    - /usr/share/hass/media
+    - /var/lib/private/hass
+  tags: hass
+
+- name: copy configuration and automations
+  become: true
+  copy:
+    src: "files/{{ item }}"
+    dest: "/var/lib/private/hass/{{ item }}"
+    mode: 644
+  with_items:
+    - configuration.yaml
+    - automations.yaml
+  tags: hass
+
+- name: create home-assistant server container
+  diff: false
+  docker_container:
+    name: hass
+    image: ghcr.io/home-assistant/home-assistant:stable
+    recreate: true
+    restart: true
+    restart_policy: on-failure
+    restart_retries: 3
+    volumes:
+      - /var/lib/hass:/config
+      - /usr/share/hass:/share
+    ports:
+      - "8123:8123"
+  tags: hass
diff --git a/ansible/roles/hass/tasks/main.yml b/ansible/roles/hass/tasks/main.yml
new file mode 100644
index 0000000..730cd64
--- /dev/null
+++ b/ansible/roles/hass/tasks/main.yml
@@ -0,0 +1,2 @@
+---
+- import_tasks: hass.yml
diff --git a/ansible/roles/http/defaults/main.yml b/ansible/roles/http/defaults/main.yml
index 51a80d2..386d0ba 100644
--- a/ansible/roles/http/defaults/main.yml
+++ b/ansible/roles/http/defaults/main.yml
@@ -7,6 +7,7 @@ deps: [
 
 ci_server_name: ci.bdebyl.net
 pi_server_name: pi.bdebyl.net
+assistant_server_name: assistant.bdebyl.net
 home_server_name: home.bdebyl.net
 parts_server_name: parts.bdebyl.net
 install_path: /usr/share
diff --git a/ansible/roles/http/files/nginx/nginx.conf b/ansible/roles/http/files/nginx/nginx.conf
index fff4796..275787d 100644
--- a/ansible/roles/http/files/nginx/nginx.conf
+++ b/ansible/roles/http/files/nginx/nginx.conf
@@ -10,6 +10,11 @@ events {
 }
 
 http {
+  map $http_upgrade $connection_upgrade {
+    default upgrade;
+    '' close;
+  }
+
   include mime.types;
 
   default_type application/octet-stream;
diff --git a/ansible/roles/http/tasks/http.yml b/ansible/roles/http/tasks/http.yml
index b546b1d..e56bcaa 100644
--- a/ansible/roles/http/tasks/http.yml
+++ b/ansible/roles/http/tasks/http.yml
@@ -38,6 +38,7 @@
     - "{{ ci_server_name }}.http.conf"
     - "{{ pi_server_name }}.conf"
     - "{{ home_server_name }}.conf"
+    - "{{ assistant_server_name }}.conf"
     - "{{ parts_server_name }}.conf"
   notify: restart_nginx
   tags: http
@@ -59,5 +60,7 @@
     - "{{ ci_server_name }}.http.conf"
     - "{{ pi_server_name }}.conf"
     - "{{ parts_server_name }}.conf"
+    - "{{ home_server_name }}.conf"
+    - "{{ assistant_server_name }}.conf"
   notify: restart_nginx
   tags: http
diff --git a/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2 b/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2
new file mode 100644
index 0000000..7a2a017
--- /dev/null
+++ b/ansible/roles/http/templates/nginx/sites/assistant.bdebyl.net.conf.j2
@@ -0,0 +1,17 @@
+server {
+  listen 80;
+  server_name {{ assistant_server_name }};
+
+  location / {
+    allow 192.168.1.0/24;
+    allow 127.0.0.1;
+    deny all;
+
+    proxy_set_header X-Forwarded-For $remote_addr;
+    proxy_set_header Upgrade         $http_upgrade;
+    proxy_set_header Connection      $connection_upgrade;
+
+    proxy_buffering off;
+    proxy_pass http://localhost:8123;
+  }
+}