Home Automation - Smartkit

Rocket-Boy said:
Yeah thats the thing with HA, if you use SSL for anything then you must use it for everything.
I have never used nginx with docker before I use it in production servers as a stream proxy to handle IPv4/IPv6 translation.
Click to expand...

I suppose with anything it makes sense - if you have something "external" embedded in your encrypted data - it's a risk.

It just took me ages to figure it out that was the problem, because no error message :D
 
I run Home Assistant (and everything else) behind Nginx Letsencrypt Proxy and DuckDNS.

There is no integration of any kind required, it simply sits "in front" of Home Assistant.
 
Rocket-Boy said:
Yeah thats the thing with HA, if you use SSL for anything then you must use it for everything.
I have never used nginx with docker before I use it in production servers as a stream proxy to handle IPv4/IPv6 translation.
Click to expand...

You don't actually SSL HA at all if you run it behind Nginx. It basically "forwards" it to http on your local LAN so that it's SSL across the internet.

And it also takes care of port forwarding so that you only need to do that once to Nginx and then it's done.
 
SauRoNZA said:
I run Home Assistant (and everything else) behind Nginx Letsencrypt Proxy and DuckDNS.

There is no integration of any kind required, it simply sits "in front" of Home Assistant.
Click to expand...

Using docker?

I'm currently running RancherOS - but going to move to a new SDD (old SDD is dead) - so probably going to run Ubuntu as the host OS
 
SauRoNZA said:
Why the mention of the current systems everyone has?

I thought the Konnected replaces all of it and wires in directly?
Click to expand...

That’s why I want the interface, want to keep the current pads etc for my family who are still in legacy land. I’m more interested in being able to monitor and record the sensors into my HA
 
xrapidx said:
Using docker?

I'm currently running RancherOS - but going to move to a new SDD (old SDD is dead) - so probably going to run Ubuntu as the host OS
Click to expand...

Yup.

Code: 
/mnt/user/appdata/letsencrypt/nginx/proxy-confs# cat home.subdomain.conf

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

server {
    # Update this line to be your domain
    server_name home.*;

    # These shouldn't need to be changed
        listen 443 ssl;
# listen [::]:443 default_server ipv6only=off; # if your nginx version is >= 1.9.5 you can also add the "http2" flag here
    add_header Strict-Transport-Security "max-age=31536000; includeSubdomains";
    #ssl on;
    #ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    #ssl_ciphers "EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
    #ssl_prefer_server_ciphers on;
    #ssl_session_cache shared:SSL:10m;
        include /config/nginx/ssl.conf;


    proxy_buffering off;

    location / {
        proxy_pass http://10.0.0.10:8123;
        proxy_set_header Host $host;
        proxy_redirect http:// https://;
        proxy_http_version 1.1;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
    }
}
 
Jladan said:
That’s why I want the interface, want to keep the current pads etc for my family who are still in legacy land. I’m more interested in being able to monitor and record the sensors into my HA
Click to expand...

Yeah I wasn't aware of the new thing at the time.

Makes sense now.
 
The intuition LC seems more expensive than the efergy counterpart.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X