Add zigbee network settings

Flake lock file updates:

• Updated input 'secrets':
    'git+ssh://git@git.vimium.com/jordan/nix-secrets.git?ref=refs/heads/master&rev=ba52c86b6ff0d0657cb57ce737851d6f6026f7f5' (2023-12-17)
  → 'git+ssh://git@git.vimium.com/jordan/nix-secrets.git?ref=refs/heads/master&rev=c6db5c3ba8bff0e618fc3e31c9680863c5e53800' (2023-12-18)

flake.lock

@@ -213,11 +213,11 @@
     "secrets": {
       "flake": false,
       "locked": {
-        "lastModified": 1702855332,
-        "narHash": "sha256-3j9wZCbVcrtEg7yQMVHJDhSAW6DESNs+6QxweWZNCNY=",
+        "lastModified": 1702936962,
+        "narHash": "sha256-uIZ2uPE26JKJ58463ejHMiAOpqBwflyN6tCmZ89vaSQ=",
         "ref": "refs/heads/master",
-        "rev": "ba52c86b6ff0d0657cb57ce737851d6f6026f7f5",
-        "revCount": 4,
+        "rev": "c6db5c3ba8bff0e618fc3e31c9680863c5e53800",
+        "revCount": 5,
         "type": "git",
         "url": "ssh://git@git.vimium.com/jordan/nix-secrets.git"
       },

hosts/pi/default.nix

@@ -83,15 +83,31 @@
     }];
   };
 
+  age.secrets."files/services/zigbee2mqtt/secret.yaml" = {
+    file = "${inputs.secrets}/files/services/zigbee2mqtt/secret.yaml.age";
+    path = "${services.zigbee2mqtt.dataDir}/secret.yaml";
+  };
+
   services.zigbee2mqtt = {
     enable = true;
+    dataDir = "/var/lib/zigbee2mqtt";
     settings = {
       homeassistant = config.services.home-assistant.enable;
       frontend = true;
+      device_options = {
+        retain = true;
+      };
       serial = {
         port = "/dev/ttyUSB0";
       };
+      advanced = {
+        channel = 20;
+        network_key = "!secret.yaml network_key";
+        pan_id = 13001;
+        ext_pan_id = [ 79 1 73 47 250 136 124 222 ];
+      };
       mqtt = {
+        version = 5;
         server = "mqtt://localhost:1883";
       };
     };