From 4f6e691e1c21d221c67e0edfddb2c73850b692dd Mon Sep 17 00:00:00 2001
From: Martin Fischer <martin@push-f.com>
Date: Wed, 14 Jan 2026 18:03:06 +0100
Subject: feat(ev): add Actual Budget

---
 nixos/hosts/ev/default.nix | 9 +++++++++
 nixos/hosts/ev/ports.nix   | 2 ++
 2 files changed, 11 insertions(+)

(limited to 'nixos/hosts')

diff --git a/nixos/hosts/ev/default.nix b/nixos/hosts/ev/default.nix
index fc7d425..0b8b2f3 100644
--- a/nixos/hosts/ev/default.nix
+++ b/nixos/hosts/ev/default.nix
@@ -126,6 +126,15 @@ in
     virtualHosts."ev.tailnet" = helpers.serviceIndexHost "ev.tailnet" ports.webUis;
   };
 
+  # Actual Budget requires a "secure context" but I'm accessing it via http:// and Tailscale.
+  # To make it work I'm allowlisting the host in my browser settings.
+  services.actual = {
+    enable = true;
+    settings = {
+      port = ports.actual;
+    };
+  };
+
   home-automation = {
     zigbee2mqttPort = ports.zigbee2mqtt;
     zigbeeSerialPort = "/dev/serial/by-id/usb-ITead_Sonoff_Zigbee_3.0_USB_Dongle_Plus_e2fed465c59ded11962fd7a5a7669f5d-if00-port0";
diff --git a/nixos/hosts/ev/ports.nix b/nixos/hosts/ev/ports.nix
index b68a046..0f1f5b6 100644
--- a/nixos/hosts/ev/ports.nix
+++ b/nixos/hosts/ev/ports.nix
@@ -4,6 +4,7 @@ rec {
   hosehawk = 4000;
   miniflux = 4001;
   navidrome = 4002;
+  actual = 4003;
   prometheus = 9090;
   prometheusNodeExporter = 9002;
   prometheusSqlExporter = 9003;
@@ -13,6 +14,7 @@ rec {
 
   webUis = {
     inherit
+      actual
       grafanaAlloy
       hosehawk
       miniflux
-- 
cgit v1.3.1