I have this config right now:

  services.home-assistant = {
    enable = true;
    extraPackages = ps: with ps; [ psycopg2 ];
    extraComponents = [
      "isal"
      "esphome"
    ];
    customComponents = with pkgs.home-assistant-custom-components; [
      auth_oidc
    ];
    config = {
      http = {
        server_host = "127.0.0.1";
        trusted_proxies = [ hassCfg.http.server_host ];
        use_x_forwarded_for = true;
      };
      recorder.db_url = "postgresql://@/hass";
      auth_oidc = {
        client_id = "home-assistant";
        discovery_url = "https://idm.ilanjoselevich.com/oauth2/openid/home-assistant/.well-known/openid-configuration";;
        client_secret = "!secret auth_oidc_client_secret";
        id_token_signing_alg = "ES256";
        roles.admin = "home-assistant_admins@idm.ilanjoselevich.com";
      };
    };
  };

  services.home-assistant.config = {
    # opinionated default_config
    bluetooth = {};
    config = {};
    dhcp = {};
    logbook = {};
    history = {};
    media_source = {};
    mobile_app = {};
    person = {};
    scene = {};
    system_health = {};
    ssdp = {};
    sun = {};
    script = {};
    tag = {};
    timer = {};
    zeroconf = {};