Remote-access Guide

home assistant remote access ssl

by Melody Eichmann Published 2 years ago Updated 1 year ago
image

If you want secure remote access, the easiest option is to use Home Assistant cloud by which you also support the founders of Home Assistant. Another option is to use TLS/SSL via the add-on Duck DNS integrating Let's Encrypt. To expose your instance to the internet, use a VPN, or an SSH tunnel.

What port is Home Assistant on?

Can you use Home Assistant Cloud without configuration?

Is putting a port up secure?

About this website

image

How do I connect Home Assistant to outside network?

2:1917:57Home Assistant 101: Setting up Remote Access - YouTubeYouTubeStart of suggested clipEnd of suggested clipAccess let's get started adding remote access to home assistant is as simple as opening a port onMoreAccess let's get started adding remote access to home assistant is as simple as opening a port on your network router to allow the outside world to get to your home assistant instance.

How do I set https at Home Assistant?

9:0713:10Getting started with Home Assistant - YouTubeYouTubeStart of suggested clipEnd of suggested clipSo go back to home assistant. Click on configuration. And then general. Under external url enterMoreSo go back to home assistant. Click on configuration. And then general. Under external url enter your dac dns url including https colon forward slash forward slash at the beginning for the internal.

Is Nabu Casa worth it?

Nabu Casa provides good value for money with features like access to smart home from everyone, text to speech technology and one click connection to voice assistants (Alexa, Google). All of this can be achieved without Nabu Casa by the technically inclined with some degree of work.

Is it safe to port forward Home Assistant?

Just putting a port up is not secure. You should definitely consider encrypting your traffic if you are accessing your Home Assistant installation remotely.

How do I enable SSH on Home Assistant?

InstallationSearch for the “SSH & Web Terminal” add-on in the add-on store and install it.Configure the username and password / authorized_keys options.Start the “SSH & Web Terminal” add-on.Check the logs of the “SSH & Web Terminal” add-on to see if everything. went well.

What is the URL of my Home Assistant server?

The URL that Home Assistant is available on from your local network. For example: http://homeassistant.local:8123 . Note that this setting may only contain a protocol, hostname and port; using a path is not supported.

How much does Nabu Casa cost?

After the initial 31-day trial period for new users, the subscription costs $6.50 + tax per month or $65 + tax for the annual plan. The annual plan is available for all countries.

Can I run Home Assistant in the cloud?

The short answer is yes and no, you can either test or run OpenHAB full-time on a cloud server but all of the Home Assistant cloud setups I've found are simply cloud connectors to the software on a Pi.

Is Nabu Casa secure?

Access from anywhere, this allows you to access your Home Assistant installation from anywhere. Easy connection to voice assistants, this allows easy integration with Google Assistant and Amazon Alexa. Security, Nabu Casa takes care of the security and hardening. You no longer need to worry about this.

Is it safe to expose Home Assistant to the internet?

There's always some risk. Having said that the last known exploit was patched very quickly by home assistant. So the risk is pretty small if you keep Home Assistant up to date and keep up to date with Home Assistant news.

Why is port 443 secure?

HTTPS is secure and is on port 443, while HTTP is unsecured and available on port 80. Information that travels on the port 443 is encrypted using Secure Sockets Layer (SSL) or its new version, Transport Layer Security (TLS) and hence safer.

How do I setup a static IP for Home Assistant?

0:241:47Assign Static IP to Home Assistant - YouTubeYouTubeStart of suggested clipEnd of suggested clipThen on the top of the screen i click on system tab in host section you can find the current ipMoreThen on the top of the screen i click on system tab in host section you can find the current ip address of your device by clicking on change this window pops up i select ipv4.

What ports does Home Assistant use?

The basics: How the app talks to your Home Assistant​ 1.4 and listening on port 8123. If you use Home Assistant OS and haven't changed any of the defaults, Home Assistant will also be reachable at http://homeassistant.local:8123.

How do I access configuration Yaml?

Click the folder icon in the top left of the file editor window to open the file browser sidebar. Click the configuration. yaml file (in the /config/ folder) to load it into the main file editor window.

How do you use Duckdns at Home Assistant?

Go to www.duckdns.org and logon using your preferred credential method. Once you logged on, add a domain and take note the token information. We will be using this token to configure the DuckDNS in Home Assistant. Also take note the domain information you created (e.g., https://myhomeassistant.duckdns.org).

What is ESPHome?

ESPHome is a system to control your ESP8266/ESP32 by simple yet powerful configuration files and control them remotely through Home Automation systems.

Setting up HTTPS for Home Assistant - Scott Helme

I absolutely love Home Assistant and if you follow me on Twitter then you will have probably seen me talking about various awesome things that I do with HA. This blog post is going to look at how I setup HTTPS on the HA web interface and just how easy it is!

Can't connect to homeassistant:8123 - Configuration - Home Assistant ...

My bad, I didn’t realise that was an acceptable url. Seems strange you can’t find the ip with Fing. That suggests your Pi is on a different network to your phone.

What is the best way to assign a domain name to a system?

The solution is to use a dynamic DNS service such as DuckDNS. This free service allows us to assign a domain name to our system which remains constant even if the IP address changes. We can then point our external devices to this domain name rather than the IP address.

How to install Duck DNS?

Click on supervisor found on the sidebar, then gogo the add-on store tab. Open up the Duck DNS add-on and when you get to the Duck DNS add-on page, click install .

How to sign up for DuckDNS?

Simply head over to the DuckDNS website and sign up using the account of your preference.

Can you use SSL and HTTPS for Home Assistant?

Note that it is not possible to use both HTTP and HTTPS to access Home Assistant, you can only use one or the other. Make sure you specify HTTP or HTTPS correctly for base_url.

Can you access DuckDNS remotely?

With the addition of DuckDNS it is possible to safely access your Home Assistant server remotely over the internet.

Can I access my Home Assistant server from outside my home?

It is possible to access your Home Assistant server over the internet, from outside of your home network. So why might we want to do this? It means we can use the Home Assistant Companion App whilst outside of the home, allowing remote access to the Home Assistant UI.

Checklist

Here’s the summary of what you must do to secure your Home Assistant system:

Remote Access

If you want secure remote access, the easiest option is to use Home Assistant cloud by which you also support the founders of Home Assistant.

Extras for manual installations

As well as the above we advise that you consider the following to improve security:

What port is Home Assistant on?

You just have to open port 443 in your router and forward it to your local Home Assistant IP on port 8123 . You also have to assign a static IP address for the server where your Home Assistant is installed. If you don’t know how to do that just ask in the comments section below or search in Google.

Where is my username on Home Assistant?

Log in your Home Assistant and click on your username in the lower left corner of the screen.

How to set up port forwarding in UniFi?

Go to Settings > Routing & Firewal l > Port Forwarding in your UniFi Controller interface and click on Create New Port Forward Rule button.

How to create a sub domain on DuckDNS?

Just go to DuckDNS.org and login with either of the available options (Persona, Twitter, GitHub, Reddit, Google) and then create a new sub domain. In a similar way as in the picture below.

What IP address to forward to Home Assistant?

This is what you aim! Just replace the Forward IP – 10.0.0.2 with your Home Assistant local address and you are good to go.

Does Home Assistant have a warning?

That means – you will receive warnings from your browser when you access the https version of your local Home Assistant. Depending of the browser that you are using you may add your local Home Assistant https address as exclusion once and you will not receive any warnings after that.

Opening a hole in the firewall

This of course varies across different brands of networking equipment. We have Ubiquiti Unifi gear in our home and I found this blog post a useful reference as I got this configured. I kept it simple and opened port 8123 (the default webserver port for Home Assistant), redirecting this traffic to 8123 on my Raspberry Pi running Home Assistant.

Getting the SSL cert in place

This is the part that took some time. Likely in equal parts due my sleep deprivation as a father to a newborn, the limited documentation I could find on pulling this off, and the poor error codes that showed up in the Home Assistant logs when things weren’t right.

Published by terryjdolan

Software engineering by day, I do projects around the house for fun. I'm also a new dad! View more posts

How to edit yaml file in Home Assistant?

To edit your configuration.yaml file in Home Assistant, you need to have their File Editor plug-in installed. Click on Supervisor in the left hand menu. Click Add-on store, and then click on File Editor. Click Install and wait for the installation to complete. Once the installation is complete, ...

What to do if your IP address matches your home IP address?

If the IP address responding matches your home IP address, double check your Cloudflare settings and make sure that the proxy status is correct.

What is Let's Encrypt?

Let’s Encrypt is a service that provides free, automated TLS/SSL certificates that can be used to encrypt website traffic. These certificates need to be renewed every 90 days - which Home Assistant can automatically take care of. We will use this certificate to encrypt traffic between Home Assistant and Cloudflare.

How often can Home Assistant update Cloudflare?

Home Assistant can run a check every hour for changes, and update Cloudflare if your IP changes. Paste the following into your configuration.yaml file. Your zone should be your domain, and the records will be any subdomains you wish to update. Use the same Global API Key that was used above.

Can you turn on multifactor authentication in Home Assistant?

You should also turn on multi-factor authentication within Home Assistant. This can be configured in the profile section of your account.

How to simulate connecting to your home assistant remotely?

To simulate connecting to your Home Assistant remotely, disconnect your phone from your home wifi and use a browser to try out YOUR-SUBDOMAIN.duckdns .org in the browser. You don’t need to add the port number to the URL because nginx is doing that for you (indeed, it’s acting as a proxy). Here is what to do if it works first time, or if it doesn’t

How to install Nginx Home Assistant?

Go to Home Assistant > Supervisor > Add-on Store > Install NGINX Home Assistant SSL proxy. (BTW you don’t need to install the Letsencrypt add-on). Type your DuckDNS subdomain for the domain entry. All else can be left as is. (Do not install the similar sounding nginx Proxy Manager for this). Start the nginx add-on. Wait some minutes after you start the add-on. Read the Log tab nearby and hope for only happy messages there.

How to find your home network?

You can do that by firstly having an easy to remember network name (e.g myhome.duckdns.org). Create an account at duckdns.org, choose an easily remembered subdomain and get the token (or long password) from your DuckDNS page.

Is Home Assistant useful?

The Home Assistant home automation hub is more useful if you can access it remotely. There’s an excellent phone app to access Home Assistant in addition to anywhere access with a browser URL. A bit of nginx magic achieves this but the resulting benefits are not only great, the mobile app can access sensors (GPS; battery, status) in your phone for very useful information.

What port is Home Assistant on?

The most common approach is to set up port forwarding (for any port) from your router to port 8123 on the computer that is hosting Home Assistant. General instructions on how to do this can be found by searching <router model> port forwarding instructions.

Can you use Home Assistant Cloud without configuration?

Users of Home Assistant Cloud can use the Remote UI without requiring any configuration. If you’re interested in logging in to Home Assistant while away, you’ll have to make your instance remotely accessible. Remember to follow the securing checklist before doing this.

Is putting a port up secure?

Just putting a port up is not secure. You should definitely consider encrypting your traffic if you are accessing your Home Assistant installation remotely. For details please check the set up encryption using Let’s Encrypt blog post or this detailed guide to using Let’s Encrypt with Home Assistant.

image
A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 1 2 3 4 5 6 7 8 9