deadstyle/home
Watch
1
0
Fork
You've already forked home
 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions
No description
9 commits 3 branches 0 tags 18 KiB
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Bob Parsons 85cbc9c1ca
All checks were successful
Deploy Home Assistant / Deploy (push) Successful in 1m2s
Details
Merge pull request 'Promote develop: Home Assistant 2026.10.0' (#6) from develop into main 
Reviewed-on: ⁨#6⁩
2026-10-09 09:44:02 -05:00
.forgejo/workflows Update actions/checkout action to v7 2026-09-30 02:35:15 +00:00
.env.example Scaffold Home Assistant deploy: compose + Forgejo Actions + Infisical 2026-09-10 09:22:13 -05:00
.gitignore Scaffold Home Assistant deploy: compose + Forgejo Actions + Infisical 2026-09-10 09:22:13 -05:00
docker-compose.yml Update Docker images non-major to v2026.10.0 2026-10-08 08:01:23 +00:00
README.md Scaffold Home Assistant deploy: compose + Forgejo Actions + Infisical 2026-09-10 09:22:13 -05:00
renovate.json chore: onboard to Renovate 2026-09-29 20:50:03 -05:00

README.md

home

Home Assistant, deployed via Forgejo Actions + Infisical, same pattern as traefik/jellyfin.

  • URL: https://home.bobparsons.dev
  • Auth: Home Assistant's own login (users + 2FA). No SSO/edge gate.
  • Data: SQLite recorder (HA default), no external DB.
  • Network: network_mode: host on both containers - required for local device discovery (mDNS/SSDP, Matter, HomeKit Controller). This means HA is NOT on the shared traefik docker network and is not routed by the shared Traefik/cloudflared stack; it has its own dedicated cloudflared sidecar tunneling straight to localhost:8123.

One-time setup

  1. Cloudflare Tunnel: create a new tunnel (or a new public hostname on an existing one) for home.bobparsons.dev → http://localhost:8123, pointed at this host. Grab the tunnel token.
  2. Infisical: project 824c2dc6-0a21-417c-bde0-53be2ce00386, environment slug prod, add TUNNEL_TOKEN at path /. Grant the shared deploy machine identity access to the project.
  3. Forgejo: on this repo, Settings → Actions → Variables, set INFISICAL_PROJECT_ID=824c2dc6-0a21-417c-bde0-53be2ce00386. Org-level INFISICAL_CLIENT_ID/INFISICAL_CLIENT_SECRET secrets already apply.
  4. Push to main - .forgejo/workflows/deploy.yml pulls the image, exports TUNNEL_TOKEN from Infisical into .env, and runs docker compose up -d --wait.

Local config

HA's /config lives on the host at /home/server/homeassistant/config (not in this repo - it's runtime state, edited through the HA UI/Studio Code Server add-on, not deployed).

Not included (by design)

  • No Zigbee/Z-Wave radio - none of the current devices need it.
  • No Postgres/Valkey - SQLite is enough for this install.
  • Google Assistant voice control of HA entities needs a separate Nabu Casa (Home Assistant Cloud) subscription; not part of this deploy.