apu local dhcp lease dns and invidious

hosts/apu/configuration.nix

@@ -258,61 +258,25 @@
     openFirewall = true;
   };
 
-  services.home-assistant = {
+  services.invidious-companion = {
     enable = true;
-    extraComponents = [
-      # Components required to complete the onboarding
-      "esphome"
-      "met"
-      "radio_browser"
-
-      "yeelight"
-      "xiaomi_aqara"
-      "shelly"
-    ];
-    subdomain = "home";
-    extraPackages =
-      python3Packages: with python3Packages; [
-        gtts
-        numpy
-      ];
-    config = {
-      homeassistant = {
-        name = "Koti";
-        unit_system = "metric";
-        time_zone = "Europe/Helsinki";
-      };
-      http = {
-        use_x_forwarded_for = true;
-        trusted_proxies = "127.0.0.1";
-      };
-      default_config = { };
-    };
+    host = "0.0.0.0";
+    port = 8282;
+    secretKeyFile = config.age.secrets.invidious-companion.path;
+    binaryHash = "sha256-nZXKpExKCc2zgSdVT3qo05NyFdpM9H9NJB5UWo+MVWI=";
   };
 
-  services = {
-    webserver = {
-      enable = true;
-      acme.dnsChallenge = true;
-      vHosts."koti.repomaa.com" = {
-        proxyBuffering = false;
-        locations."/".proxyPort = 8123;
-      };
-    };
-
-    invidious = {
-      enable = true;
-      subdomain = "vid";
-    };
+  networking.firewall = {
+    enable = true;
+    interfaces.tailscale0.allowedTCPPorts = [ 8282 ];
   };
 
   security.acme.defaults.environmentFile = config.age.secrets.hetzner.path;
 
   networking = {
     nftables.enable = true;
-    firewall.enable = true;
     useDHCP = false;
-    domain = "repomaa.com";
+    domain = "apu.home.arpa";
   };
 
   system.stateVersion = "24.05";

hosts/apu/secrets.nix

@@ -10,6 +10,7 @@
       })
       [
         "hetzner"
+        "invidious-companion"
       ]
   );
 }