diff --git a/configurations/nixos/defiant/configuration.nix b/configurations/nixos/defiant/configuration.nix
index 2b221ab..6655572 100644
--- a/configurations/nixos/defiant/configuration.nix
+++ b/configurations/nixos/defiant/configuration.nix
@@ -280,6 +280,11 @@
       subdomain = "home";
       openFirewall = true;
       database = "postgres";
+
+      extensions = {
+        sonos.enable = true;
+        jellyfin.enable = true;
+      };
     };
 
     qbittorrent = {
diff --git a/modules/nixos-modules/server/home-assistant.nix b/modules/nixos-modules/server/home-assistant.nix
index 7497995..231c2e1 100644
--- a/modules/nixos-modules/server/home-assistant.nix
+++ b/modules/nixos-modules/server/home-assistant.nix
@@ -21,6 +21,20 @@ in {
       description = "what database do we want to use";
       default = "builtin";
     };
+
+    extensions = {
+      sonos = {
+        enable = lib.mkEnableOption "enable the sonos plugin";
+        port = lib.mkOption {
+          type = lib.types.int;
+          default = 1400;
+          description = "what port to use for sonos discovery";
+        };
+      };
+      jellyfin = {
+        enable = lib.mkEnableOption "enable the jellyfin plugin";
+      };
+    };
   };
 
   config = lib.mkIf config.services.home-assistant.enable (lib.mkMerge [
@@ -50,11 +64,9 @@ in {
           "radio_browser"
           "isal"
           "zha"
-          "jellyfin"
           "webostv"
           "tailscale"
           "syncthing"
-          "sonos"
           "analytics_insights"
           "unifi"
           "openweathermap"
@@ -80,10 +92,22 @@ in {
           ];
       };
 
+      # TODO: configure /var/lib/hass/secrets.yaml via sops
+
       systemd.tmpfiles.rules = [
         "f ${config.services.home-assistant.configDir}/automations.yaml 0755 hass hass"
       ];
     }
+    (lib.mkIf (config.services.home-assistant.extensions.sonos.enable) {
+      services.home-assistant.extraComponents = ["sonos"];
+      networking.firewall.allowedTCPPorts = [
+        config.services.home-assistant.extensions.sonos.port
+      ];
+    })
+    (lib.mkIf (config.services.home-assistant.extensions.jellyfin.enable) {
+      services.home-assistant.extraComponents = ["jellyfin"];
+      # TODO: configure port, address, and login information here
+    })
     (lib.mkIf (config.services.home-assistant.database == "postgres") {
       host = {
         postgres = {