{
  makeSystem,
  nixpkgs,
  nixng,
}:
makeSystem {
  system = "x86_64-linux";
  name = "nixng-home-assistant";
  inherit nixpkgs;
  config = {
    pkgs,
    config,
    lib,
    nglib,
    ...
  }: let
    inherit
      (lib)
      singleton
      mkForce
      ;
  in {
    config = {
      dumb-init = {
        enable = true;
        type.services = {};
      };

      init.services.home-assistant = {
        shutdownOnExit = true;
        environment.PATH = with pkgs;
          pkgs.lib.makeBinPath [
            coreutils
            git
            ffmpeg
            bash
            runit
          ];
        ensureSomething.create."media" = {
          type = "directory";
          mode = "755";
          owner = "home-assistant";
          dst = "/media";
          persistent = true;
        };
      };

      # TODO remove when https://github.com/project-chip/connectedhomeip/issues/25688 lands and nixpkgs updates
      _module.args.pkgs = mkForce (import nixpkgs {
        overlays = [nixng.overlays.default] ++ config.nixpkgs.overlays;
        system = "x86_64-linux";
        config.permittedInsecurePackages = [
          "openssl-1.1.1w"
        ];
      });

      services.home-assistant = {
        enable = true;
        envsubst = true;
        customComponents = {
          pyscript = pkgs.fetchzip {
            url = "https://github.com/custom-components/pyscript/releases/download/1.5.0/hass-custom-pyscript.zip";
            hash = "sha256-d+WBqdCw/J3a+hrQD5dxVZdmgsMcxbukDxWFDnKdI0o=";
            stripRoot = false;
          };
        };
        config = {
          default_config = {};
          recorder = {
            db_url = "postgresql://hass:\${PSQL_PASSWORD}@127.0.0.1/hass?client_encoding=utf8";
            db_max_retries = 5;
            db_retry_wait = 30;
          };
          stream = {};
          http = {
            server_port = "8123";
            use_x_forwarded_for = true;
            trusted_proxies = ["127.0.0.1"];
          };
          logger.default = "info";
          homeassistant = {
            name = "Home";
            latitude = "\${LATITUDE}";
            longitude = "\${LONGTITUDE}";
            elevation = "\${ELEVATION}";
            # currency = "EUR";
            unit_system = "metric";
            time_zone = "\${TIME_ZONE}";
            country = "\${COUNTRY}";
            internal_url = "http://localhost:8123/";
            whitelist_external_dirs = [
              "/mnt/cctv"
            ];
            media_dirs.local = "/mnt/cctv";
          };

          pyscript = {
            allow_all_imports = false;
            hass_is_global = true;
          };

          automation = "!include automations.yaml";
          alarm_control_panel = import ./configs/alarm_control_panel.nix;
          frontend.themes = {};
          sensor = singleton {
            platform = "time_date";
            display_options = [
              "time"
              "date"
              "date_time"
              "date_time_utc"
              "date_time_iso"
              "time_date"
              "time_utc"
              "beat"
            ];
          };
        };
        package = pkgs.home-assistant.override {
          extraComponents = [
            "http"
            "homeassistant"
            # "image"
            "person"
            "cloud"
            "camera"
            "onboarding"
            "frontend"
            "met"
            "zha"
            "mobile_app"
            "dhcp"
            "logbook"
            "history"
            "ssdp"
            "mqtt"
            "stream"
            "recorder"
          ];

          extraPackages = ps:
            with ps; [
              xmodem
              psycopg2
              aiohttp-cors
              bleak-retry-connector
              psutil-home-assistant
              bluetooth-auto-recovery
              croniter
              reolink-aio
              watchdog
              buienradar
            ];
        };
      };
    };
  };
}