From 7ee72808017e2056c46b4f962e6d6fffe1518a07 Mon Sep 17 00:00:00 2001
From: death916 <tavn1992@gmail.com>
Date: Fri, 30 May 2025 23:42:23 -0700
Subject: [PATCH] ha ports

---
 modules/home-assistant.nix | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/modules/home-assistant.nix b/modules/home-assistant.nix
index 53331d0..9b77e6a 100644
--- a/modules/home-assistant.nix
+++ b/modules/home-assistant.nix
@@ -34,7 +34,15 @@
   };
 
   # Firewall rule for Home Assistant
-  networking.firewall.allowedTCPPorts = [ 8123 ];
+  networking.firewall = {
+    allowedTCPPorts = [ 8123 ];
+    allowedUDPPorts = [ 
+      5353  # mDNS/Bonjour discovery
+      1900  # SSDP/UPnP discovery
+      1901  # UPnP
+      3702  # WS-Discovery (ONVIF specific)
+    ];
+  };
 
   # Ensure the `hass` user has access to necessary devices (e.g., Zigbee/Z-Wave dongles)
   users.users.hass.extraGroups = lib.mkIf (config.services.home-assistant.enable) [