this post was submitted on 01 May 2024
42 points (95.7% liked)

homeassistant

11878 readers
1 users here now

Home Assistant is open source home automation that puts local control and privacy first. Powered by a worldwide community of tinkerers and DIY enthusiasts. Perfect to run on a Raspberry Pi or a local server. Available for free at home-assistant.io

founded 1 year ago
MODERATORS
 

I had to add this:

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 127.0.0.1

to config, but overall it's very useful article.

top 6 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 6 months ago

I tried all sorts of port forwarding tricks to get wireguard working on the VM that runs my HA instance to no avail. The trailscale solution works really well. The only real problem I had was magic DNS conflicts with DNS66 on my phone (which I use for ad blocking). In the end I just used a hardwired VPN IP for my HA connection.

[–] [email protected] 2 points 6 months ago

Thank you for bringing this to my attention! I just enabled it, and it's working flawlessly.

[–] [email protected] 2 points 6 months ago (1 children)

I did this a while ago. The useful thing (and I don't know if it's covered in the blog because I didn't read it) is setting it up as an exit node.

This is useful because I have other things on my network that I wanna access, like my server, and with the exit node I can type Lan IP addresses into my browser while I'm outside the house and still access them, not just HA

[–] starman 2 points 6 months ago (1 children)

You have to use tailscale VPN for this, right? The article explains how to setup access to HA via the internet, without using tailscale client.

Anyway, the exit node thing is indeed very nice.

[–] [email protected] 1 points 6 months ago

I've just clicked into the article and no, it's set up the same way as I have, except I set HA as an exit node in the Tailscale console.

[–] [email protected] 1 points 6 months ago

Do you need to use tailscales server for anything (like certs)?

I want to try to set up a network but prefer keeping everything 100% self-hosted.