From 210a5d1468bcb70feb1854aa262a50cc81211181 Mon Sep 17 00:00:00 2001
From: David Wronek <david.wronek@mainlining.org>
Date: Sun, 26 Apr 2026 10:36:54 +0200
Subject: [PATCH] nixos/esphome: set ExecPaths

It looks like ExecPaths was removed in #508178, after adding it in #498811.
ExecPaths is required to fix building firmware for LibreTiny-based
devices, otherwise we get the following error:
```
sh: line 1: /var/lib/esphome/.platformio/packages/toolchain-gccarmnoneeabi/bin/arm-none-eabi-g++: Permission denied
```

Signed-off-by: David Wronek <david.wronek@mainlining.org>
---
 nixos/modules/services/home-automation/esphome.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/nixos/modules/services/home-automation/esphome.nix b/nixos/modules/services/home-automation/esphome.nix
index b33a55da33aa..f172a3179d32 100644
--- a/nixos/modules/services/home-automation/esphome.nix
+++ b/nixos/modules/services/home-automation/esphome.nix
@@ -145,6 +145,7 @@ in
         RuntimeDirectoryMode = "0750";
         EnvironmentFile = lib.mkIf (cfg.environmentFile != null) cfg.environmentFile;
         ReadWritePaths = [ stateDir ];
+        ExecPaths = [ stateDir ];
 
         # Hardening
         CapabilityBoundingSet = "";