diff --git a/nixos/boxes/bolty/home-assistant.nix b/nixos/boxes/bolty/home-assistant.nix
index 0eeec5fe..4ebdafc4 100644
--- a/nixos/boxes/bolty/home-assistant.nix
+++ b/nixos/boxes/bolty/home-assistant.nix
@@ -1,14 +1,19 @@
 { config, pkgs, inputs, lib, ... }: {
   imports = [ ];
 
+  networking.firewall.allowedTCPPorts = [ 8123 ];
   virtualisation.oci-containers = {
     backend = "podman";
     containers.homeassistant = {
       volumes = [ "home-assistant:/config" ];
       environment.TZ = "Europe/London";
       image =
-        "ghcr.io/home-assistant/home-assistant:stable"; # Warning: if the tag does not change, the image will not be updated
-      extraOptions = [ "--network=host" ];
+        "ghcr.io/home-assistant/home-assistant:stable@sha256:5e3d2dde141812a4a54c140f3cbf52b9c74168bf25e8560978f499578902a363";
+      extraOptions = [
+        "--network=host"
+        "--privileged"
+        "--device=/dev/ttyACM1:/dev/ttyACM1"
+      ];
     };
   };
 }