#add-ons-archived

1 messages Β· Page 61 of 1

viscid orchid
#

then I recommend terminating SSL @ NGINX and just use http: and port 8123 to HA

#

and comment out the ssl_* lines

dim oak
#

(rebooting with new config)

viscid orchid
#

you go through NGINX

balmy elk
#

i woul suggest folloing the "missing" request. Does the Duckdns addon have a log? (never tried it). if it has, could you set a loglevel? Info or "trace" or debug?

dim oak
#

log yes, log level...checking

sly kindle
#

@dim oak you might use the Nginx Proxy Manager addon. it can simplify things

#

and will get the cert for you

#

Otherwise you are using DuckDNS to get the cert and should be seeing that in the DuckDNS add-on logs

dim oak
#

thanks so much for all the advice. working on it now.

balmy elk
#

@dim oak checkin in the duckdns log if a request comes in at all - would be the first step. After that we might determine / suggest in which direction we have to look next :P.

#

well if you found the ducklog, just open it, make a request over duckdns in a second window to you ha, "refresh" the log display. You should/must see a kind of Request. Ideally it works, else with an Error reponse or so.. πŸ™‚

#

And the baddest part would be if you see nothing. Then your Problem lies outside ha, in your router or firewall or so πŸ™‚

#

i found my request in the nginx addon. And with the reauest from my domains there was a response "400 bad request". This way i knew certain that the request reaches my ha - or at least the Proxy Addon. At this moment it was clear: Problem must be inside. πŸ™‚

dim oak
balmy elk
#

make sure you have log settings a high as possible... at normal settings you would not see a (successful) request. But however, that indicates for me that your Problem might be aside from ha. So, what else did you changed last night? ^^

#

Another idea here: If you trace the request by developer tools of your browser there must be an answer to the duckdny request.

#

if you cant reach you ha you should get a timeout here

#

else another http responsecode

#

maybe its "just" something simple like not renewing your external ip4 adress at duckdns.org?

dim oak
balmy elk
#

ok so next we have to check where your request goes πŸ˜‰ and why.

#

you habe a kond of router to access the internet

#

could you find out what your external ip is?

#

dont need to post it here

#

youst find out

#

just

#

usually you can optain yopur external ip adress somewhere in your router menΓΌ

#

or modem.

#

obtain...

#

compare the adresses πŸ™‚

#

they should be similar... πŸ™‚

#

because both should arrive at your modem/router

#

if the adresses are not equal - then there is something wrong with the Ip renewing from ha with duckdns-service. maybe wrong credentials in your duckdns addon, for example

#

we will see πŸ™‚

#

or an easier way to obtain your own external ip is calling an external service like a website which diplays it πŸ™‚

dim oak
#

(will look soon thx!)

dim oak
#

ping works

#

addresses are equal and it resolves

balmy elk
#

ok thats good. or bad πŸ™‚ - than the next step: Does your modem/ router forward this requests to your proxy or directly to your ha instance? I forward from the external request through my router HAlocalip:443 and HAlocalip:80. Both ports goes to my nginx addon in HA

#

for explanation. bad because we else had found a very good reason why its not working

#

easy to fix, too πŸ™‚

dim oak
#

thanks for helping with this, i really appreciate it

balmy elk
#

so if the requests from duckdns arrive at your router/modem, what we just checked, Only the way between router and HA is left to check. Please check that the request is forwarded to the correct internal address by correct router forwarding rule. if this connection is also right you should see incoming reuqests.

dim oak
#

(i'm using Tomato)

#

i'm going to try something dumb and delete all obsolete/unused ports in my table just for fun

#

could be something conflicting

balmy elk
#

sounds cool. since when? πŸ™‚ tonight? (would be an explanaition)

#

well best way to make a dry config is build it up from scratch...but sounds a bit painfull πŸ™‚

dim oak
#

yeah. this is all so weird. no luck regardless of what i do here and i'm over my head.

#

tbh i don't know when it stopped working, i just noticed while i was away on vacation last week for the first time in 6 months. before that i only really accessed it via local ip (WFH, etc.)

balmy elk
#

always try to tear down a complex problem into smaler chunks whereever it is possible and check each chunk until you find the root cause. Then from there implement the right solution. tbh often it really s.... to get down there. πŸ™‚

#

so u use tomate.

#

if i look to tomato there is a nice little GUI where xou coul enable port forwarding.

#

sorry for my typo.

#

i dont know what exactyl you put in here with duckdns. But i expect 2 Rules. TCP ext 80 to internal HA ip and TCP ext 443 to internal HA ip . usually the internal ip also responds to 80/443. (my addon proxy does).

dim oak
#

ok well you just did help me out with something in the "smaller chunks" advice

#

i set up another dynamic ip on noip.com just for fun and...it works. so now i can try to figure out wtf.

#

SUCCESSSSSSSSSS

#

πŸ•Ί

balmy elk
#

sounds really strange cause we checked the ip with the duckdns Service already - but - glad you found at least a trace. congrats πŸ˜‰

dim oak
#

yes. thanks again. it was just the isolating part, you got me in the right headspace. i eventually tracked it down to my scoping outside IP redirects to only allow one hostname to my media server but not the home assistant hostname

#

and i had dnsmasq active to that hostname too which was causing problems internally

gritty citrus
#

hey guys im having issues with the Nginx Proxy Manager addon, i have port forwarded and setup the domain to point to my IP address at home and I'm getting a error 400: Bad Request

#

when i ping the domain i have setup to go to my home assistant i can confirm its going to the right IP

sly kindle
#

@gritty citrus did you set up trusted_proxies etc in your http: config ?

#
  use_x_forwarded_for: true
  trusted_proxies:
    - 172.30.33.7 (example)```
gritty citrus
#

oh no i didnt

gritty citrus
#

the proxie is also on the same machine so the trusted ip would be 127.0.0.1 right?

dim oak
#

hey all, i'm back with my stupid nginx problems as well. Now my ingressed add-ons won't load in the local instance. what am i doing wrong?

#

i can get them all to load via external (dyndns.org) but nothing locally anymore.

#

thank you immensely for helping with my noobness

dim oak
#

everything is 401 unauthorized

dim oak
mortal blaze
#

Hi, I'd like to have https for HA and to remotely access HA using the HA app but also no open ports on my router (if that is possible). Alternatively a secure way to access HA with my Android phone without opening a port on my router and https, again, if it is possible. Currently running HA OS on a virtualBox VM on Linux Mint but will migrate to HA Blue when it arrives. It seems NGINX and Wireguard require port forwarding. Admitedly, reading the documentation leads me to believe it is not possible. I have not experience with this. Suggestions are appeciated.

mortal blaze
#

I'm also trying to stay local and out of the cloud.

vestal sail
#

theoretically all I need to do is

  use_x_forwarded_for: true
  trusted_proxies:
    - 172.30.33.X```
in configuration.yaml and we are good?
vestal sail
mortal blaze
#

Ok. Thanks. Was the theoretically ... post meant for me? If so that would then make it https? How would I access HA then?

vestal sail
#

no sorry entirely unrelated.

mortal blaze
#

ok. Thanks

vestal sail
#

If it helps, I use homeassistant OS and use the nginx addon to provide https with my letsencrypt wildcard cert

#

then i have wireguard to get back to home when I'm away, setup as an always-on VPN so that I always have adblocked dns and can access home resources when I need to

#

I find it to be pretty damn secure.

mortal blaze
#

I appreciate the input. Looks like I have little option but to open a port on the router if I want to keep things local.

vestal sail
#

I mean, accessing your system from outside of your network makes it inherently "not local"

#

Your android phone will be able to access it fine while you're connected to your own wifi assuming you have no weird local isolation turned on

#

if you want to access HA without being on your local network, the options are basically: port forward home assistant to the internet, setup a vpn, or use nabu casa

mortal blaze
#

I see your point ref: "inherently not local"

#

I'll look into your post about your setup. I appreciate it.

vestal sail
#

I mean this community is all about keeping stuff off "the cloud" where you can, so I understand your goal

sly kindle
#

But it's like saying I want a house I can enter from outside but with no doors

mortal blaze
#

Lol

#

tunnel from the basement maybe?πŸ˜†

vestal sail
#

Having one door that is secure isn't too big of a risk

#

tunnel from the basement is probably about the same as having one port open in an obscure range to host your wire guard node

mortal blaze
#

I'm convinced. I obviously need to learn a lot more about this but you have given me a starting (if not an end) point. It's 1 am here so I'm hitting the sack. Thanks again.

vestal sail
mortal blaze
#

πŸ‘ appreciated.

weary stratus
#

Hello,

i migrated my home assistant to a SSD, and used a snapshot i made just before that to restore it.
Its running on a pi4 which is connected via ethernet, and i use a windows 10 pc to interact with it.
Before the snapshot it all worked perfectly but now no longer.

Duckdns also stopped working but i fixed that by making a new domain name. Esphome also stopped working but a re-install fixed that. But now samba share is refusing to work even after a re-install. My pi also doesnt show up on my network either but other devices do.

willow lintel
#

Can you see the Pi in your router? have you rebooted the host after the install method changed? just to be sure the system can startup correctly with all new settings (might require a hard boot ...)

#

o sorry, didnt see your last lines..

weary stratus
#

i can see the pi in my router with its ip adres, but i can not get into it with that ip only. i have to put https:// in front

#

and :8123 at the end

willow lintel
#

you didnt have to do that before the migration to SSD?

weary stratus
#

i did always needed to do that because duck dns changed things with certificates and such

#

could it be that i installed samba, before duck dns?

#

as extra info, i had to change the external and internal ip adress in general settings to the duckdns link. As google didnt want to cast my cameras from a internal ip

willow lintel
#

iow, do you still use the SD card for boot only, or do you use another method, and no longer use the SD card at all, and actually boot from SSD (which is not officially supported...)

weary stratus
#

the sd is not used at all, it now boots from SSD

willow lintel
#

using a direct connection to the SSD or a powered usb hub (just to exclude the back-powering issue with those hubs, preventing booting)

weary stratus
#

its a direct connection via usb 3.0 port

willow lintel
#

ok great. at least for now. just be aware this is not officially supported, or according to HA guidelines

#

and talking about https://, you are aware this is something different than Samba connection? I mean the ssl connection for the browser is set in the http: integration settings

weary stratus
#

where can i see that http integration part ?

willow lintel
weary stratus
#

i got that in my configuration.yaml http: ssl_certificate: /ssl/fullchain.pem ssl_key: /ssl/privkey.pem

willow lintel
#

correct

weary stratus
#

but that is only added, when i installed duck dns

willow lintel
#

actually, the keys themselves are created in the folder by Letsencrypt when you installed DuckDNS add-on. You point the http: integration to those keys using this http: setting

#

can you see the Frontend in your Browser? (that is an entirely different thing from being able to see the instance in your file manager over Samba)

weary stratus
willow lintel
#

so you can go to Supervisor, select the addon Samba share, and restart it?

weary stratus
#

yes i restarted it

#

on a side note, when i try to reach the ip via file explorer in windows, it gives me the message: the external device doesnt accept the connection

willow lintel
weary stratus
#

no i dont have that in mine

willow lintel
#

wait nevermind, this isnt necessary here, Samba exposes the other dirs too.

#

what happened after the add-on restart

#

was it succesful?

weary stratus
#

its the same message interpret_interface: Can't find address for eth0 WARNING: no network interfaces found

#

i did read some parts where they said it worked on 9.3.1 but not on 9.5.1. Im not sure if i updated my sambashare to 9.5.1 After the migration

willow lintel
#

well, you can check cant you πŸ˜‰

weary stratus
#

no i mean, im not sure if it was 9.3.1 after the migration, and that i then updated it to the latest version. As it is 9.5.1 now

willow lintel
#

O I see. fwiw, using 3 instances here all on 9.5.1, and no issues, my gut says it is something else....

weary stratus
#

ah yea then that shoudn't be the issue then

willow lintel
#

I would give it a hard boot, and given the fact you can reach the Frontend, thats quite simple and safe: go to Supervisor/System and click Shutdown Host. wait until all lights stopped blinking. wait some more seconds and pull the power. wait 10 seconds or so, and reconnect the power.

#

given the fact you can see the frontend, means your cable is connected properly and the Pi 'sees' the internet, so we dont have to bother with that

#

(please tell me you dont use wifi on the PI....?)

weary stratus
#

no im using ethernet :p

#

let me hard boot it then

willow lintel
#

ok. if after the powerup, you still see this ethernet message, something else should be done, which I will try to think of during my coffee break πŸ˜‰

weary stratus
#

thanks, will let you know when its up and running. I can use some coffee too πŸ˜›

#

its a miracle

#

samba is now working, BUT before the complete shutdown, i removed the internal ip adress in configuration.yaml. Setting the internal ip to duckdns is needed for google to be able to cast to screens. So that will probably not work now.

#

i will try to chane the internal back to external and see if it still works

#

it is still working!

willow lintel
#

Great

#

For the Google you might be able to set a dedicated base_url (using that in notifications to play files)

weary stratus
#

yea for some reason if i dont make my internal the same as the external (which is duckdns) google refuses to cast anything

willow lintel
#

That has to do with certificates on duckdns

weary stratus
#

so now both are external, but that has worked without isses though

#

maybe its just a case of making sure samba first gets the internal, and if you switch it to external after it doesnt matter somehow?

#

oh it definatly is the internal thing

#

after i restarted samba it now is refusing connecting again

#

i will see if i can fix it by a host reboot or if it needs a host shutdown

willow lintel
#

External@is fine, except when the internet is down, and you can no longer reach it…

weary stratus
#

it stopped working and host reboot is not fixing it

#

so ill try host shutdown again

#

it works

#

alright, so the moral of the story is. After you change your internal ip to a external ip (so google cast works) NEVER press restart on samba share, as it will stop working and will only be fixed by removing the internal ip (which is the same as external) and shut down host and unplug.

willow lintel
#

well, tbh, this doesnt sound good. I've had internal_url = external_url for ages, and no issues restarting Samba at all.

weary stratus
#

yes it's a bad solution to be sure, but i have no clue how to fix it

willow lintel
#

my hope would be Cogneato comes in later to day and reads this, he will be able to tell.

weary stratus
#

i hope so, as just a simple restart will mess up my whole notification and cast setup

#

but Marius, thank you so much! your help has really helped tremendously

willow lintel
#
  - platform: google_translate
    service_name: google_say
    base_url: !secret base_url # == external_url
    cache: false```
#

does the trick

weary stratus
#

the secret base url, would that be home assistants ip ?

willow lintel
#

yes, in this case the external ip address, including the port you use, so https://yourdomain.duckdsn.org:port

weary stratus
#

i will give that a try later on, as i have to run some errands

willow lintel
#

haha dont we all πŸ˜‰ good luck

weary stratus
#

thank you πŸ™‚

pine kestrel
#

after starting addon Adguard, does anyone see anything in the logs after "[15:21:49] INFO: Starting NGinx..." ? its the last message in my log and the interface does not work

dim oak
vestal sail
#

Yeah I dunno what the right channel is since I don't use the wire guard addon

dim oak
#

me neither πŸ™‚

vestal sail
#

Basically it's just wire guard on a VM, I have a second wire guard node on a VPS I rent in a local datacenter for internet, then from home I only open the port for wire guard access into my network

dim oak
#

i've followed as much guidance as possible and about 100 outdated blog posts, yet every time i get it all working externally (LE + DuckDNS etc) i lose ingress add-ons internally

vestal sail
#

When I'm out and about my phone connects to internet sites via the VPS and home sites at home

#

I don't use DuckDNS as I've found no need, my Comcast modem doesn't change IPs literally ever

dim oak
#

so even then when you connect internally from within your network are your ingress add-ons (e.g., nodered, terminal, vs studio, frigate) loading or do you get 401s?

vestal sail
#

I don't use any of those so I'm not sure.

#

vs code I use the internal addon for, and none of the rest you mentioned

#

not really sure what you mean by ingress addon

dim oak
#

yeah internal add-on is the same. i just mean it surfaces itself via ingress in an iframe

vestal sail
#

ah

vestal sail
#

yeah for me using the built-in SSL was broken but I had luck using nginx

#

im about to hit the road but dm me so i don't forget

dim oak
#

ok thank you!

scenic lynx
#

Hi I'm looking for some help setting up adguard with my unifi controller?

pine kestrel
#

i managed to get it to work: set a port for tcp access in the Adguard addon (e.g. 3009), and also go into the host and open that port in the firewall. now i can access it with hostname:3009

heady chasm
#

hello o/ when i try to open web ui for file editor and other add-ons it keeps giving me a "401:unauthorized" error and im not sure why it giving me that or what to do about it

rose smelt
#

is it possible to make an add-on that can be on the monitor? e.g. an add-on with emulation. Or a video player.

raven tinsel
#

Nope

rose smelt
#

ok thanks.

#

Guess i buy another NUC then. :/

dim oak
#

@raven tinsel sorry to bug -- yesterday i dove into the world of ngnix thanks to your plugin, messed things up, and now every single thing with ingress gets a 401. have you seen this before and any way i can recover?

gritty citrus
#
  use_x_forwarded_for: true
  trusted_proxies:
    - X```

Could some please assistant me further?  What do i enter in the trusted proxies? is this the IP of where the machine is doing the domain reversing or is this where you put ips for accepted machines to connect to?
viscid orchid
#

"proxies"

#

is the IP/network of the proxy

gritty citrus
#

proxy = Nginx Proxy Manager ?

weary stratus
#

someone help me with hw

gritty citrus
#

so i would be putting the same ip as the mahcine then becuase the proxy is on the same machine

weary stratus
#

i need someone to check my answers

viscid orchid
#

you would review your logs and use the IP that it's complaining about

gritty citrus
#

would the ip or 127.0.0.1 be better?

viscid orchid
gritty citrus
#

ah ok thanks

#

witch log?

viscid orchid
#

the log

#

configuration -> Logs

gritty citrus
#

no ip showing

#

just this

Traceback (most recent call last):
File "/usr/local/lib/python3.9/site-packages/aiohttp/web_protocol.py", line 314, in data_received
messages, upgraded, tail = self._request_parser.feed_data(data)
File "aiohttp/_http_parser.pyx", line 546, in aiohttp._http_parser.HttpParser.feed_data
aiohttp.http_exceptions.BadStatusLine: 400, message="Bad status line 'invalid HTTP method'"```
viscid orchid
#

🀷

gritty citrus
#

😦

gritty citrus
#

does anyone else have an idea?

earnest tiger
#

What are you running HA on, @gritty citrus ?

#

What network type is your nginx using? bridge?

gritty citrus
#

@earnest tiger Nginx Proxy Manager using vmware esxi

#

bridge

earnest tiger
#

So for me, I'm using swag/let's encrypt docker. I use the container's IP instead of my LAN's IP. So my container IP is 172.20.0.2 and that's mapped to 192.168.64.200. So I put in 172.20.0.0/24 and that worked for me

#

so you can try that

gritty citrus
#

so i put the server ip as trusted?

#

the same one thats the home assistant

#

so if the server ip is 192.168.1.116 then i put that in the trusted?

gritty citrus
#

@earnest tiger

earnest tiger
#

You can try that, but it didn't work for me. try 172.17.0.0/16

gritty citrus
#

ok ill try 172.17.0.0/16

viscid orchid
#

If that’s the problem, you’ll see it clearly in the HA logs, and it will tell you the address it sees

gritty citrus
#

mine doesnt report an ip address it needs

#
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/aiohttp/web_protocol.py", line 314, in data_received
    messages, upgraded, tail = self._request_parser.feed_data(data)
  File "aiohttp/_http_parser.pyx", line 546, in aiohttp._http_parser.HttpParser.feed_data
aiohttp.http_exceptions.BadStatusLine: 400, message="Bad status line 'invalid HTTP method'"```
#

is all i get

#

any ideas?

earnest tiger
#

So the 172 IP didn’t work for you?

#

And neither did the 192

viscid orchid
#

if they're not seeing an error message complaining about a connection from a proxy, then any IP is unlikely to help

gritty citrus
#
  use_x_forwarded_for: true
  trusted_proxies:
    - 192.168.1.116/24```
#

hmm

#

now this errors out in cofig

#

config

earnest tiger
#

What’s the error?

gritty citrus
#

The system cannot restart because the configuration is not valid: Invalid config for [http]: not a valid value @ data['http']['trusted_proxies'][0]. Got '192.168.1.116/24'. (See /config/configuration.yaml, line 10).\

earnest tiger
#

Don’t put /24 at the end there

gritty citrus
#

ah

#

thanks ill try that

earnest tiger
#

You can use 192.168.1.0/24 for the entire network, or 192.168.1.116 for that specific address

gritty citrus
#

trying 192.168.1.0/24

#

hmmm

#

sigh

#

not sure what im doing wrong

earnest tiger
#

how is your nginx set up?

gritty citrus
#

im using Nginx Proxy Manager

#

websockets enabled

sly kindle
#

@gritty citrus share your http config

#

With formatting

gritty citrus
#
  use_x_forwarded_for: true
  trusted_proxies:
    - 192.168.1.116```
sly kindle
#

What do you see in the ha logs now?

gritty citrus
#
Source: /usr/local/lib/python3.9/site-packages/aiohttp/web_protocol.py:393
First occurred: 1:36:45 PM (16 occurrences)
Last logged: 1:37:12 PM

Error handling request
Traceback (most recent call last):
  File "/usr/local/lib/python3.9/site-packages/aiohttp/web_protocol.py", line 314, in data_received
    messages, upgraded, tail = self._request_parser.feed_data(data)
  File "aiohttp/_http_parser.pyx", line 546, in aiohttp._http_parser.HttpParser.feed_data
aiohttp.http_exceptions.BadStatusLine: 400, message="Bad status line 'invalid HTTP method'"
sly kindle
#

Can you restart ha now?

#

The IP is wrong but will it restart?

gritty citrus
#

weird the ip is what i got on the superviser panel

#

restarting doesnt seem to help

#

another IP is showing in the vmware control panel

#

172.30.32.1

#

should i try that?

viscid orchid
#

it seems like all of this is just a bunch of hacking around if you don't see something like this in your logs:

#
2021-07-27 18:23:39 ERROR (MainThread) [homeassistant.components.http.forwarded] A request from a reverse proxy was received from 172.20.0.4, but your HTTP integration is not set-up for reverse proxies
#

it might be fun, but doesn't seem productive

gritty citrus
#

hmmm

#

yea i dont see that

gritty citrus
#

😐

dim oak
#

@gritty citrus fwiw i am in the same mess you are. i am not certain why this is so difficult.

#

i spent the past 5 hours undoing all my ngnix & stuff because it was causing 401 errors

viscid orchid
#

Your problem may be that you’re using Firefox

dim oak
#

(i'm not but i do know why you're advising that!)

dim oak
#

so i've spent hours frustrated as shit over 401 errors. and @viscid orchid 's message got me curious because i'm not using firefox. turns out Brave is causing this even with "shields down" in the latest brave build. something about the latest build broke ingress. thanks for mentioning that.

gritty citrus
#

srs Firefox is the issue

unborn current
#

I'm getting to old for this, I just don't get it (pulling out my last few hairs)
OK, it has been raised a million times before, i've looked at many more answers and I can't see the forest through the trees anymore.
It is about accessing Home Assistant from a remote computer.
I've done my research before jumping in here and I know i need to put in this:

  use_x_forwarded_for: true
  trusted_proxies:
    - XXX.XXX.XXX.XXX # Add the IP address of the proxy server

but I don't know which IP address goes in the xxx.xxx.xxx.xxx
Is it the the one my HA runs on 192.168.86.103, or my Proxmox 192.168.86.76 or the ip address from the computer I try to access from (which can be many different ones) or is it my internet provider one 102. xx.xx.xx (got a fixed IP so not sharing here πŸ˜‰
Some people mention nginx, do I need to install that to get access? (and another can of worms for me)
But I do get access using the HA app on my phone regardless if I'm home or not. Why does that one work, that will have a different IP when away from home. And I've seen to put in an IP address starting with 172.xx.xx.xx, where did that number come from?
Can someone point out which one to use for this confused idiot. (that's how I feel atm, it should be obvious)

balmy elk
#

@unborn current you need this config if you use a reverse-proxy in front of your HA. And if you use a proxy, your proxy ip goes in here. HA must thrust this "forwarded" request which is not originally from the proxy - but from your client (external, in front of the reverse-proxy). That is all at this point of conf. (if you use a docker-contained proxy with not fixed ip, than you might consider implementing proxy-iprange instead of the single ip in HA config) In your case i dont know if you use a proxy at all. (Dont know "proxmox" well - to me this does not look like a proxy software.

waxen igloo
#

How can I possibly increase the amount of hard disk space to store data with my Influx addon?

dim oak
#

put a bigger HD in?

sly badge
#

how to make tasmoadmin show in sidebar?

raven tinsel
sly badge
raven tinsel
#

Firefox?

sly badge
#

Brave

raven tinsel
#

Anyways, the add-on itself doesn't support ingress, so the only way you could achieve something like that is using an iframe

#

otherwise there are no options

river obsidian
#

I'm having a difficult time authenticating GitHub in the VSCode add-on. Was working using the Personal Access Token for a while, all of a sudden no go and having a difficult time re-starting the process to re-authenticate. Unfortunately most searches for github + vscode + home assistant take me to, surprise surprise, the VS Code Add-on for Home Assistant Github page πŸ™ƒ

#

Running it on the Blue btw

cobalt oxide
#

Hi all, I simply cannot figure out how to get past the step in the wiki "Add new pai user in Mosquitto for PAI to use. Check your Mosquitto addon manual." There is no option under config for me to add a user, i've been struggling all day to try and figure this out, could someone please help my sanity and point me in the right direction here?

#

For PAI addon I might add

viral spruce
#

You create them through the HA Users panel; configuration -> Users -> βž• Add User

#

I think

unborn current
#

@balmy elk I think I’ve solved my issue. It looks like the company I work for is using that reverse proxy thing. It’s just from their computers that I can’t connect.

cobalt oxide
viral spruce
#

Nois, glad it helped

mortal blaze
#

Hi, On a new HAOS install in Virtualbox on Linux Mint 20.2, new hard drive etc. HA error: 401: Unauthorized pops up for every add-on so far:ESPHome and file editor in my current try. I had the exact same setup working before my SSD died. An install of my last snapshot produced the same issue. My HA ver is 2021.7.4. I have re-installed and restarted several times following: https://www.home-assistant.io/installation/linux/ Any help is appreciated.

viscid orchid
#

I don't remember how's tried what. What browser are you using and can you try another?

mortal blaze
#

I'm using Brave. It has always worked. But I'll try Firefox.

viscid orchid
#

I think both Brave and Firefox have issues with their various protection options

#

do a search here

mortal blaze
#

ok, I'll try chrome

viscid orchid
mortal blaze
#

Chrome worked. Thanks. I just wonder what changed all of a sudden. I'll go to the link you sent.

mortal blaze
#

FWIW: Just a follow-up. I was able to get Brave to work after a while. Thing is, I didn't change any settings, so I don't know what is different.

dim oak
#

even with shields off

#

a few questions. for duckdns/ngnix: i will write this up to share when it's all done because clearly there is a lot of confusion. first, on my router, should i be forwarding 443 to 443, 8123 to 8123, or 443 to 8123?

#

right now i have 443 to 8123

#

second, for trusted proxies, if we're just using a hass os install on rpi under a router, we use the device as the trusted proxy? e.g. if my network is 192.168.1.x, i would do

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 192.168.1.0/24
#

and even more specifically i could do

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 192.168.1.222
#

which is my specific device. is this correct?

#

i know these questions have been asked repeatedly and i'll write it all up and share to hopefully help others like me in the future because it seems much harder than it should be

tepid dock
#

On your Router, you can pick whatever random high number port and forward to the port hass OS has designated as your proxy; but the standard numbers should be shown in your addon config tab down the bottom πŸ™‚
Those two little sections both look valid from my understanding also

dim oak
#

right, but if we want foo.duckdns.org -> 192.168.1.222:8123 (hass os port) then would it be 443 -> 8123?

tepid dock
#

yeah if you really don't want to slap a port on the end of that, it would have to be 443

dim oak
#

thanks. so then with that http conf, we then have a choice of 2 ngnix add-ons:

  • NGINX Home Assistant SSL proxy
  • NGNIX Proxy Manager

The first attempts to be plug & play with duckdns & LE. The second is more robust. Which is the recommended path?

tepid dock
#

I do not know the answer to that one. I think the former as it is in the "official add-ons" might be the safer bet

dim oak
#

Agreed, and it's simpler too. Now I'm trying to nuke my duckdns/LE stuff and start over to figure out why none of this is working πŸ™‚

tepid dock
#

I cannot follow along with what you're asking because I just let mine do its updates

dim oak
#

you mean you have a dynamic url that just works both externally and internally? there was no version of mine that "just updates" to do this

tepid dock
#

no, like there was a core and OS update that I have allowed to happen

#

and so until it is done I cannot look at mine

dim oak
#

ohhhhh hahaha i see. you mean right now πŸ™‚

#

yes!

#

the 15 minute wait

tepid dock
#

the PoE fan is running 100% and it's reminding me of the old days of computing

dim oak
#

i guess part of my issue is i can't figure out what network i need to trust for reverse proxy on hass os

#

nor where to find this out

#

the docs say 172.30.33.0 as an example.

dim oak
#

this is what i see in nginx logs:
28/Jul/2021:23:55:30 -0700] - - 301 - GET http xxxxxx.duckdns.org "/" [Client 192.168.1.1] [Length 162] [Gzip -] [Sent-to 192.168.1.222] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:90.0) Gecko/20100101 Firefox/90.0" "-"

#

but it won't serve up the site

agile pewter
#

Hi, is there a way to update the a0d7b954 addons to d4b0f290 without losing data? (influx, grafana, nodered...)

agile pewter
#

did anyone know it? thanks

sly kindle
#

@agile pewter what repo are you referring to?

viscid orchid
#

Maybe taking about the edge repo?

sly kindle
#

ahh. makes sense

viscid orchid
#

I suspect the answer is β€˜no’ because I can install both at the same time and I think the repo β€˜tag’ is appended to the directories, but I haven’t looked in detail

onyx olive
#

Is using the hassio.addon_stdin service with the terminal addon the same as opening the addon and typing the command there?

sly kindle
#

@onyx olive yes. you can test in the developer tools > services page. Here's an example of a command changing volume <#330990055533576204 message>

#

It looks slightly different now versus when that screenshot was taken. You can find other examples/frustrations here using discord search and "hassio.addon_stdin"

onyx olive
#

I was actually hoping there was a difference, hehe. I'm trying to mount my NAS and it works within the add-on but it's not shown outside. I might have to go with the shell command in configuration.yaml instead.

agile pewter
sly kindle
#

The official addon repository slug is "core"

#

Community addons slug is "a0d7b954"

#

I still don't know what d4b0f290 is but there should be a name. No one refers to these repos with their slugs really

#

It apparently is not the community beta repo or the community edge repo from what I can tell

#

But either way, these are all separate. Migrating data from one to another would be something you'd have to figure out based on what app/service you are using.

onyx olive
#

What does this mean in the logs? [supervisor.addons.options] Option 'vnc_password' does not exist in the schema for deCONZ (core_deconz)

#

Remove vnc_password: null from yaml mode perhaps? Something from an old version maybe

viscid orchid
#

if you have that in the addon config, then yes, it looks like you should remove it

grizzled plover
#

I tried googling and searching here and nobody seems to have a better answer than clearing cookies/cache.

I'm getting 401: Unauthorized errors accessing Addons (File Editor, Node RED), but only in Firefox. Chrome works. I've deleted my cache and cookies. Still get it.

Seems to be Related to ingress. Issue happens on the external and internal URL.

viscid orchid
#

Many people in this channel have reported the same

grizzled plover
viscid orchid
#

I don’t know if there’s a good solution. But you can search this channel

grizzled plover
#

holy cow, I turned off "Enhanced Tracking Protection" in FF and it's working in Firefox now.

Just clicked on the shield to the left of the URL and toggled the slider. CTRL-F5, and it works.

#

Node RED Also.

viscid orchid
dawn perch
#

Hey guys, I'm having an issue - can't install File Editor, after trying to install, hass gives me an error each time: "Can't install homeassistant/aarch64-addon-configurator:5.3.3: 500 Server Error for http+docker://localhost/v1.41/images/create?tag=5.3.3&fromImage=homeassistant%2Faarch64-addon-configurator: Internal Server Error ("Get "https://registry-1.docker.io/v2/": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)")"

Any idea how I can solve this?

slow crow
#

Hello, guys, I am running a Docker Hassio image + Swag with own DNS, is there anyone I could talk to?

royal valve
#

I updated today to 2021.7.4 now my deconz conbee2 no longer works, so the stick and the interface already but the connection to the zigbee devices no longer works. who knows a solution

royal valve
#

ok it looks like my conbee broke, i loaded the snapshot from yesterday but no improvement

iron flicker
edgy elk
#

hey guys running ngnix proxy and lets encrypt. Updated my cert 2 weeks ago and it expired today.

#

ran the let encrypt thing again and it said the cert isn't ready for renewal?

obtuse kernel
#

Is this the right place to ask about DOODS?

viscid orchid
#

Is it an addon?

obtuse kernel
#

Yeah but still never know.

#

Anyway, I was wondering if there's a way to change the detection box (or whatever it's called) colour from yellow to something more easy to read on my own camera images.

dim oak
#

Frigate question. I'm now getting

frigate.edgetpu                INFO    : No EdgeTPU detected.
frigate.app                    INFO    : Capture process started for front_door: 43

After I moved my coral to the rpi4 usb3 port. Before it was on a hub plugged into the usb2 port. Any advice? It should work, right?

dim oak
#

figured it out, underpowered usb issue

undone thorn
#

Hi, Mosquitto addon, last version, I could connect sometimes via MQTT Explorer without user and pass and subscribe and publish topics. Not always but sometimes. Why ? How can I block anonymous login ?

normal cosmos
#

hey guys, trying to set up mosquitto, I have an existing broker on an old openhab system that is pulling the topics currently into HA, but I want to make HA fully self contained as I wish to repurpose the other sd card/pi. I have set all the settings the same on both, changed the host IP on one of my mqtt devices and then receive these errors in HA :

1627724003: New client connected from 192.168.86.245 as mqtt-explorer-f1d58d8d (p2, c1, k60).
1627724015: New connection from 192.168.86.7 on port 1883.
401: Unauthorized1627724016: Socket error on client <unknown>, disconnecting.```
candid drum
#

How can I automaticly resume playing music after a TTS broadcast?
Assistant-Relay isn't being maintained anymore, is there an alternative?

untold dew
#

I configured Zwave JS to MQTT https://github.com/zwave-js/zwavejs2mqtt on a RaspberryPi w/Docker: the Aeotec ZWave USB controller has connection to my ZWave devices.
What is the next step to make Home Assistant (OS, core-2021.6.6) aware of my ZWave devices?

viscid orchid
languid jackal
#

greetings! I am having difficulties with the National weather service add on/integration.( I never know which i need to use. ) do concerns about it go here or in #integrations-archived ?

viscid orchid
meager merlin
#

Anyone know the process to add a new person's iPhone to presence tracking?

viscid orchid
#

With an addon?

dim oak
#

have them install the HA app on their iPhone and you have access to their location

#

or use a router integration to detect when they connect to wifi

dense spadeBOT
sturdy flax
#

I'm finally getting around to integrating InfluxDB into Home Assistant (HA OS install). I've installed the AddOn and followed the instructions for integrating into HA. The instructions say after completing the steps (create database, user, pass) you will see an entry in configuration.yaml. However, I do not see anything in there related to InfluxDB (using the SSH addon and terminal to view config/configuration.yaml).

umbral ermine
#

I installed insteon-mqtt & mosquitto as add-ons in HA Supervised running in Debian VM on a Mac Mini.
They appear to be communicating, but I do see one error when Insteon-mqtt starts:
β€œThe WebSocket transport is not available, you must install a WebSocket server that is compatible with your async mode to enable it. See the documentation for details. (further occurrences of this error will be logged with level INFO)”

Whatever I try, I can’t seem to get a command from Insteon-mqtt to work. It seems like they run up against a brick wall and timeout. Is the error above causing this?

sturdy flax
final flume
#

Hey everyone, installed HA Core on Docker, and all is working great on that end, but I've been unable to get vs code's home assistant extension to work. VS loads up, but I cannot seem to get it to "find" my home assistant directories

#

my home assistant config files are here: /home/w00master/homeassistant/config I see all the necessary directories and files, but whenever I try and navigate there via VS, nothing shows up? I inserted the long lived token & my HA local IP & port info

#

i'm clearly doing something wrong, but cannot find any resources to help on it, so hoping someone here can help

sturdy flax
dim oak
pulsar steppe
#

Am installing MariaDB - wanted to use the secrets.yaml means of keeping the password out of the configuration panel. However I get an Invalid YAML error as soon as I start typing !s.. into the MariaDB configuration panel. Is this not possible with this add-on, or am I missing something in the way this should be handled?

https://www.home-assistant.io/docs/configuration/secrets/

pulsar steppe
#

@random coyote - I've encountered this same 400: Bad Request when trying to access my Home Assistant server remotely via the Nginx Proxy Manager.

I appear to have fallen foul of not reading the Breaking Changes prior to remotely initiating an upgrade to Home Assistant Core 2021.7.

I am currently living several 100Kms away from my house and cannot return there due to Sydney, Australia being in strict Covid-19 lock down. We've been in lock-down since late June and it looks like it will not be lifted for quite some time yet. Could you or anyone who might know a bit about such things, advise what options I might have to fix this problem remotely?

[I should add I'm running HA via Home Assistant OS, and with the Nginx Proxy Manager used to facilitate external (WAN) access as mentioned above. And yep I've read as much as I can on Discord about the requirement to update the the http: settings as per:
https://www.home-assistant.io/integrations/http#reverse-proxies]

weary stratus
#

Hello, i have a question. The situation is as followed: Im running home assistant on a raspberyy pi. I wish to put all my music on the pi itself, and then be able to cast a playlist to my google speakers. Singular mp3s work via HA itself, but is there a addon that would act as a media server, so i dont have to use another pc or device acting as a server?

viscid orchid
#

β€œ!secret blah blah”

strong swallow
#

Hi everybody... I just completed my new Blue installation. Using the Lutron Caseta native integration instead of the Lutron upsert custom component. Somewhere it is still being referenced. Went thru the removal process outlined but it's still showing up in core.entity_registry. How do I clean it ALL out? thanks

knotty skiff
#

Hello everyone, can someone help me with the "WireGuard" add-on?

#

i cant seem to get internet through the "Tunnel":

knotty skiff
#

all add-ons don't work?

sly kindle
#

@knotty skiff what do you mean

knotty skiff
#

And i wanted to use the wireguard

#

But i cant to get it working

#

It looks like my device is connected

#

But i cant acces anything

#

E.g. internet and internal network

chrome cape
#

hello

#

does someone knows if i can completely disable an (official) addon without setting it up first?

umbral ermine
# dim oak i was there 1 year ago. step 1 is abandon the mac mini and get yourself a rpi. i...

thanks - I'm sure i will get there, but I was trying to make sure I at least understood how to make things work 1st. In this case, after 2 weeks of head-banging, I fixed the self-inflicted error almost right after I asked the question here. Under the I-M MQTT settings, I had put the name of the MQTT server ("core-mosquitto"), instead of the address (192.168.1.xxx), and I still don't know if I should've used 127.0.0.1, but it works and I can go forward. Node-Red next!

pulsar steppe
ember crater
#

Im at a little bit of a loss. Im using nginxproxymanager and updated HA. i know they changed the http: config and ive added that using the IP of HA itself...does it need a port number or something? i cant get it to work no matter which address i try. Other domains are working fine through npm

viscid orchid
#

You should use - 172.30.33.0/24

ember crater
#

i tried that for my ip range and it didnt work last time.. even tried 172.0.0.0 too

viscid orchid
#

See what it says in the HA log. It will tell you the IP it sees

#

That range is for the NPM addon (or any addon)

ember crater
#

this is what i see.

#

[02/Aug/2021:10:45:24 -0500] - 400 400 - GET https x.duckdns.org "/api/websocket" [Client 107.77.206.53] [Length 16] [Gzip -] [Sent-to 192.168.5.209] "Home Assistant/2021.7 (io.robbie.HomeAssistant; build:2021.202; iOS 14.6.0)" "-"

viscid orchid
#

I don’t know where that came from, but it’s not the important part

ember crater
#

from npm logs

viscid orchid
ember crater
#

oh the received x-header in the normal logs. i see that one now

#

idk where that Ip comes from. but i see it

#

makes sense why i didnt run into this on my other instance. i have npm ran outside of HA

viscid orchid
#

Ok. You’re posting in addons, so I assumed…

ember crater
#

it is an add-on in this instance im working on now. ill give it a shot

#

I think that worked. thanks alot!

solar locust
#

After updating to HAOS 6.2, I now get Error code: SSL_ERROR_NO_CYPHER_OVERLAP when trying to open the Unifi Controller.

#

Anyone else seen this?

sly kindle
#

@solar locust Firefox? What happens in another browser?

solar locust
#

@sly kindle Chrome and Safari give the same result.

#

@sly kindle I've read about a couple of temporary workarounds, but would perfer a fix.

solar locust
#

@sly kindle error when typing in the :8443 URL:
Bad Request
This combination of host and port requires TLS.

#

@sly kindle restored 23.1, still not able to get the web ui.

cunning axle
#

ok.. i was pointed here for networking questions... i wanted to confirm that none of my ports will be exposed / instance is only accessible inside the network, unless i forward a port on the router. so i was thinking security and figured if i kept external access to just using my openvpn connection, that should mitigate external threats?

EDIT: Nevermind, I have to do some more reading.. this is probably on the wrong channel (again) too anyway... that's my intro... lol 😁

olive seal
#

@cunning axle broadly, yes. if you don't forward any ports from your router then you're relatively secure.

#

a MariaDB add-on question for anyone who's had experience migrating or recovering from snapshots: are all of your MariaDB databases included in a Full Snapshot?

viscid orchid
#

they are

pulsar steppe
#

If I'm using the Nginx Proxy Manager add-on to facilitate remote (WAN) access, is there a standard `<PROXY IP> address with this add-on or do I have to use the logs to find out what is allocated by the HA OS?

viscid orchid
#

Yes, you should review the logs

final slate
#

Hi! Using ESPHome V1.20.3 on Hassio, I have 3 DS1820s sensors. On Hassio, 2 sensors work great. Sensor named "sensor.pool_temp_out" don't.

I rename my sensor and did'nt help... My config of ESPHome is https://pastebin.com/sKkbMDcu. I double check with ESPHome support and everything look good.

dense spadeBOT
#

@final slate Your message has been deleted as it contains a link or a domain name 'pasteboard_dot_co' that is on the blocked list because of: 'Virus detected!'.
Please re-post by removing/changing the domain name/link. Your original message has been DM'ed to you.

final slate
fiery prism
dense spadeBOT
austere anvil
#

Hello i have my deconz instance running in a seperate container managed by myself. Id like to migrate it to be a home assistant add on, managed by the supervisor. Is there a way to do this so that i dont lose my devices in deconz as well as all the home asssistant entities / devices? I see there is a backup / restore feature in phoscon but how would that work with the home assistant entities>?

sly kindle
#

@final slate is it excluded from recorder: or is the card configured for the right number of hours?

final slate
#

@sly kindle Hi! I did'nt exclude any sensor from recorder. Even in database, I had noting about this sensor

final slate
fiery prism
final slate
austere anvil
#

Just an update on my earlier message, i restored my deconz config from the custom container to the home assistant add on container. I can control the lights from within phoscon. The issue is the existing home assistant entities do not work. I could not see a way to point the deconz integration from my old container to new add on ip. I tried creating a second deconz integration instance pointing to the add on container this just created a whole load of new entities (which do not work)

#

is there a way to migrate the HA entities from one integration instance to another? or a way to change the phoscon IP in the deconz integration

rotund blaze
#

Guys, AdGuard didn’t seem to work properly and I’ve uninstalled the Add-On. Now I would like to reinstall the Add-On, but it isn’t showing in the store. I’ve restarted everything. Any suggestions?

viscid orchid
#

just that one is missing from the Community Addons repo, or is the whole repo missing from your addon store?

rotund blaze
viscid orchid
#

you can try hitting Reload from the 3-dot menu and then refreshing the page

rotund blaze
viscid orchid
rotund blaze
cunning axle
viscid orchid
thorn pendant
#

Hi did something happen to the nginxproxymanager? I tried logging in today after not looking for a while, asked for a username and password and it wasnt what I thought i had. Turns out it was set to the default. Changed it and just logged in but all my redirects are gone. The most confusing thing is that even though they are gone they are all still working

thorn pendant
uneven spade
#

I have on different internal i.p. and ports, two HA installations. On both, I configured Samba with exactly the same config. Samba on Win 10 works on the first install, but not on the second. Even when I stop the Samba server on the first install. I get the message "Windows cannot access \ 192.168.x.x"
"diagnose" obviously does not help.
Could somebody help me?

Log shows:
PANIC (pid 295): Signal 11: Segmentation fault in 4.13.8
unable to produce a stack trace on this platform
coredump is handled by helper binary specified at /proc/sys/kernel/core_pattern
Registered MSG_REQ_POOL_USAGE
check_ntlm_password: Authentication for user [xxxx@gmail.com] -> xxxx@gmail.com] FAILED with error NT_STATUS_NO_SUCH_USER, authoritative=1
Why samba is loking for the user xxxx@gmail? user as in config is homeassistant.

grizzled sand
#

Hi, I updated home assistant earlier this day.
But know appdaemon won't boot anymore. I read that It could be full drive, but I deleted a bunch of all snapshots so that shouldn't be a problem...

violet heron
#

hey guys, i'd like to ask about things that i've struggling, my grafana web UI at another port and my tasmoadmin at another port isnt working anymore.. i've got "ERR_SSL_VERSION_OR_CIPHER_MISMATCH" error. 2 days before its fine and now i cant access to the web UI.

#

didn't do anything to duckdns config though....

solar locust
#

Same error I'm getting with the Unifi Controller add-on. Something is amiss.

violet heron
#

fortunately i've got unifi devices at my network πŸ™‚

solar locust
#

@violet heron Yes, same error since I updated to HAOS 6.2. Was reported earlier by a few others. I'm using Ubiquiti APs so far.

violet heron
#

i've tried to install a fresh 6.1 though... but its keep getting the same error. i guess the damage were permanent... downgrading not gonna help 😦

#

probably about the certificate that being released by let's encrypt. but who knows....

solar locust
#

No, a downgrade didn't help.

#

Do your add-ons have a non-SSL option? If so, some have reported that they can run in non-SSL mode.

violet heron
#

tasmoadmin is working if i uncheck the SSL button

#

with http: i can still connect

#

grafana.... i can set the ssl parameter to false. but lovelace iframe cant load the plain http url

solar locust
#

Yes. Some add-ons require SSL to function.

violet heron
#

so im revert back my iframe to the usual 8123... but keep getting the 401 error for some period time, had to open grafana UI to clear that for every time

solar locust
#

I was out here a couple days ago looking for some help, but it appears not too many seeing this problem so far.

violet heron
#

@solar locust nor do i see any open issued at the github...

#

already opened one, but closed it because i thought its not about the OS problem... turns out some ppl experiencing the same problem

#

πŸ˜†

solar locust
#

There are a couple open for the Unifi Controller, but they remain not assigned.

#

The August release is out. Devs might have the time to take a look.

solar locust
#

Let us know if you find the fix.

violet heron
#

πŸ‘

#

for now, ill try to get it arround... hahaha

solar locust
#

Good luck!

eternal sigil
viscid orchid
#

well, that's from 2017

eternal sigil
#

oh.

viscid orchid
#

you install the DuckDNS addon and follow the instructions

eternal sigil
#

thats where i need help

#

i have the addon, and it still seems to support lets encrypt

viscid orchid
#

it does

eternal sigil
#

the config file looks like this: ```lets_encrypt:
accept_terms: false
certfile: fullchain.pem
keyfile: privkey.pem
token: null
domains:

  • null
    aliases: []
    seconds: 300
#

some things are obvious, the token for duckdns, accepting the terms for lets encrypt

viscid orchid
#

have you read the docs?

#

no need to guess. it has step-by-step instructions

eternal sigil
#

docs about setting up duckdns for HA?

viscid orchid
#

yes, the addon docs

#

the ones under "Documentation"

#

in the addon

#

that say "how to use"

eternal sigil
#

oh my god im sorry

#

thank you

rapid birch
#

hello i updated to core 2021.8.0 and im getting this error when i open traccar HTTP 415 Unsupported Media Type - NotSupportedException (...)

uneven spade
#

I have 2 well-functioning HA installations on different ports.
I still can't understand why win10 is allowing me to \ \ 192.168.x.x and not allowing me to \ \ 192.168.100.x.y
From iPhone, smb :// x.x.x.x and .y works as it should. Where to look for the cause?

digital grotto
#

ports? ips?

obtuse kernel
#

Hi all. Are there any addons that can be configured to automatically send an SSH command to a remote terminal? I want to configure an automation for my UPS battery running low to send a shutdown command to a piece of networking gear.

digital grotto
uneven spade
# digital grotto ports? ips?

different ports, different ip on the same network. But now I know that the setup of my win is faulty. Works ok on my daughter's laptop. Now, I don't want to keep wading through the lousy window interface. Thanks. mate.

mint wolf
#

I just added the repo, clicked install, then start. That it, should be simple but doesn't work

viscid orchid
#

What browser are you using?

mint wolf
#

Vivaldi

viscid orchid
#

Try chrome

mint wolf
#

Don't have it, however this looks like addon problem to me, not browser

viscid orchid
#

Or turning off some of the new protection features

#

Ok πŸ€·β€β™‚οΈ

mint wolf
#

Because as soon as I try to open the tab and it fails, the addon crashes and I have to restart it

viscid orchid
#

Ok, you didn’t mention that

mint wolf
#

Sorry still trying to get my head around HA, but so far I'm banging head against the wall

viscid orchid
#

In that case, you should review the addon logs

mint wolf
#

just before I go, where can I find addon logs? Configuration > Logs is empty

final aurora
#

Trying to figure out the nginx_proxy to forward 443 to ha. I have the lets encrypt installed and gettnig a valid cert, nginx starts and when I browse to my server:443 I get a valid cert, but it returns "400: bad request."

viscid orchid
sly iron
#

is anybody having error 401 with the file editor?

viscid orchid
#

what browser are you using?

sly iron
#

Firefox

viscid orchid
#

that's why

sly iron
#

?

viscid orchid
sly iron
#

thanks

#

after adding it to the exceptions it is working now

sly kindle
hollow imp
#

Good evening!
I have my own domain, HA available externally via a reverse proxy running on my Pi.
I have PiHole running on another pi on the same LAN, and I want to use this PiHole as my DNS resolver when using mobile data on my phone. I thought about setting up a subdomain in the NGINX Proxy manager Add-on. The subdomain would forward the traffic to the local pi on port 53. Would this work properly? Or is there a better way?

#

I know my DNS shouldn't be public, but I'm not trying to solve this by opening port 53

#

Don't want to use vpn for this

#

I want to enter my own domain in my Android's Private DNS section

#

Entering port is not allowed

rustic nacelle
#

has anyone built a neovim add on, using the the embedded mode?

shadow agate
#

good morning

#

i'm enable to acess any add-on that uses ingress for several weeks with the error:

21-08-06 12:55:00 WARNING (MainThread) [supervisor.api.ingress] No valid ingress session None

#

i have clear all cache

#

close de browser

#

stopped the add-ons and restart...

#

so far nothing

#

any ideias?

#

well I just did a search on the channel...

#

thank you

sour gulch
#

I am very confused~ I've added the ad guard add on, it talks setting networkmanager to use a static ip (even thou we're using DCHP with an ip reserved). The Instructions says I could use either frontend or CLI.. since the hardware is now uh.. headless, I can't seem to find the option to set the statis of the IP or any other network config in the frontend.. so I'm very confused πŸ˜„

stark grove
#

Hm... I just restarted after having stopped and disabled Grafana & InfluxDB. Despite that, InfluxDB was started?! Is there a new dependency of some sort? Perhaps the new statistics card?

sour gulch
#

?

#

Not understanding what you're meant to be implying?

digital grotto
#

click supervisor in the sidebar and there under the system tab you can set an ip

#

at least with HA OS

sour gulch
#

I am so so blind!

#

Thank you @digital grotto

#

I looked in supervisor - System but I didn't see the IP Address - Change

#

ok, now I'm confused. It's listening to a different ip than what I set.. huh

#

(AdGuard, that is)

eternal sigil
#

i was in the middle of installing the vlc addon, and the config to add to the config file has disappeared from the github docs page...

#

it was there a couple hours ago

knotty skiff
#

Hello. i have a question. Do addons not work on HASS.IO?

grave cape
#

Is there a way to get HA to push data into an influxdb database without running influxdb itself on the same host?

#

There's an influxdb add-on, but it seems to actually run influx.

viscid orchid
#

There’s no requirement that it be located on the same host

floral ivy
#

Anyone else had issues with Mosquito Broker in hassio? After a day or some my mqtt devices disconnect (Martin Jerry switches). The logs don't give much info expect a timeout or a socket error. A reboot of the addon and it works for another day. Never had this issue when running on Docker with Ubuntu '

grave cape
viscid orchid
#

Yes

#

You always need the integration to push data to Influx

quasi jolt
#

Hello, today I tried installing home assistant since I want to use it with esphome, it's installed on a raspberry pi 4 4Gb via the official image, everything works except when I try to open the web interface of the plugin I get a blank page

#

tried going in from my phone and it works

#

must be some sort of incompatability with firefox for some reason?

vast arch
# floral ivy Anyone else had issues with Mosquito Broker in hassio? After a day or some my mq...

None so far. Been running it for over a month now and have 15+ Shellies plus a handful of other clients sending every minute or less. Not large messages, but frequent messages. Previously I was running mosquito 2.x (and Hass Docker) and one thing I’ve noticed since switching to the stock add-on which runs mosquitto 1.x is I have mosquitto_sub running and I restart the mosquitto add-on I will stop getting messages with mosquitto_sub until I restart mosquitto_sub. This never happened with the 2.x server. But now that I think about it I’m still using the 2.x mosquitto_sub client.

floral ivy
vast arch
#

Oh, sorry. My shellies don’t have an issue with the add-on restarting, this is when I run mosquitto_sub from command line when debugging or watching the stream for fun.

#

So just restarting the add-on and you devices automatically reconnect?

versed blade
#

Greetings! I am attempting to integrate SolarEdge monitoring into HA - influxdb / grafana / telegraf. But the scripts for telegraf are python and assume you can access telegraf folder locations to add this python script, and that telegraf can run python. I'm lost. Can anyone help?

daring sand
#

just installed new update... far out... where did HomeKit add on go?

viscid orchid
#

no longer required, superseded by the Homekit Controller integration

daring sand
#

ok

grand agate
#

i just set up Grafana and InfluxDB. Every now and then, Grafana would keep getting bad gateway error which I think is caused by InfluxDB stalling or unresponsive. Is there a fix for this?

forest basin
#

is there a way to start node red on homeassistant os as root, so it can emulate an alexa device on port 80?

little flame
#

is there a esphome discord because i am getting a red X when i do pin: D1

#

`sensor:

  • platform: dht
    model: DHT11
    pin: D1
    temperature:
    name: "Timys Bedroom Temperature"
    humidity:
    name: "Timys Bedroom Humidity"
    update_interval: 5s`
sly kindle
little flame
plush ivy
#

Hello,
I looking for solution to add 'AVS FT-06E' tracker to the HA. Originally this tracker works with 'FreeTrack' apk. I tried to set it up on 'Traccar' add-ons but without any luck.

carmine tapir
#

FWIW, +1 that add-ons were no longer 401 unauthorized in firefox after disabling "enhanced tracking protection"

grizzled aurora
#

is there a deconz discord or a good place where can i ask?

#

im having stability issues with my zigbee devices/network/deconz

viscid orchid
grizzled aurora
#

sounds good, thanks

winter ice
#

Hey ya'll a quick question, is it possible to link a Google Nest Learning Thermostat with the Tado Smart Radiator Thermostat (The physical knob) so i could heat rooms speratly but also maintain the functionality of the nest thermostat ? πŸ˜’

heady sail
#

Anyone here use motionEye or webhooks in general? I'm looking to get motion sensor feedback from the Add-On

proud hornet
#

Hello, I just installed Homeassistant on my raspberry, but when I launch an addon, I get error 401 unorthorized
Edit: Nevermind, I found it, just had to turn off the strickt security setting in my firefox

fresh fossil
#

Hi, I have been running Unify add-on for quite some time. Yesterday when I tried to go to the UI I got the following error.

Secure Connection Failed

An error occurred during a connection to xxx.duckdns.org:8443. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.

Please contact the web site owners to inform them of this problem.

I have no clue what I have done nor when the problem occured, it was months since I used the UI the last time. My system has all the latest updates.
I have tried the normal stuff, restarting the add-on, uninstalling-reinstalling, restarting the system. Rolling back 5 days of back-ups. Nothing works. Does any-one have any tips on how to get back to working level.

dense spadeBOT
final aurora
#

Is there a way to remove the Energy tab from the sidebar? I'm not using it and it's just taking up space.

viscid orchid
#

yes, press and hold on "Home Assistant" in the sidebar, hit the x

#

feel free to kill other things or rearrange while you're there

final aurora
#

Thank you!!! I would've never thought to click and hold...

viscid orchid
#

there's also an "edit" button in your profile, but I'll grant that it's not obvious how to do it

barren temple
#

how do you roll back to previous versions of esphome from backups

weary stratus
#

Hi, I am having an issue with the MariaDB add-on. The recorder stops working with the following error:

Logger: homeassistant.components.recorder
Source: components/recorder/__init__.py:409
Integration: Recorder (documentation, issues)
First occurred: 4:12:23 (1 occurrences)
Last logged: 4:12:23

The recorder queue reached the maximum size of 30000; Events are no longer being recorded

And when I check the add-on logs I see this:

[03:02:36] INFO: Lock tables using mariadb client...
[03:02:36] INFO: MariaDB tables locked.
[05:05:00] INFO: MariaDB tables unlocked.

I am not sure it is related but the timings seems very suspicious... how come the tables get locked for 2 hours? if they are locked, I guess HA cannot write and therefore the queue explodes... any ideas?

weary stratus
#

ok, it seems is the snapshot that is locking the tables

steady condor
#

#Frigate anyone have an example of a Portainer setup for Frigate? I'm struggling with the path_to_config as I don't understand what config the instructions are referring to.

keen venture
#

Ginlong Solis in HA

broken chasm
raven tinsel
#

It tries to update on start of the add-on

#

and you can hit update in the UI (under gateway)

#

If that all fails, the manual you linked can be done, but on a different computer, not in HA OS

broken chasm
#

I'd have to plug the ConBee II into a pi with a clean raspbian install?

raven tinsel
#

If you need/want to do it manually: yes

humble brook
#

I'm having issues getting ADB working and the docs say the native thing might not work on new tv's. I want to try the adb addon but it seems to be removed / missing from the addon store

raven tinsel
#

the integration has fully replaced the add-on

#

and thus the add-on has been deprecated a long time ago (and removed)

humble brook
#

If you are using the Python ADB implementation approach, as mentioned above, there may be some issues with newer devices. In this case, you should use the ADB server approach instead.

#

I'm guessing the addon acts as a server.

clear harbor
#

hi friends, with my MQTT port 8883 exposed on the Internet it seems TLS connections can be established without a certificate -- although I need to re-examine my config, could this be the HA default behavior..?

covert arch
#

neither the server nor the client should be able to accept/connect withouth a certificate, you must have ignore_cert options enabled if this works imo (or it's plain)

strong needle
#

Setting up MQTT

manic narwhal
#

Just joined discord, anyone find a workaround for casting to google hub after new firmware update?

foggy spear
#

I´m running "HomeAssistant_supervised" and have a little problem with the adguard add-on. Every time the add-on is restarted "/usr/share/hassio/addons/data/a0d7b954_adguard/adguard/AdGuardHome.yaml" is replaced. I need to change the "bind_hosts" as i need it to listen to the host interface, not the container interface. Now I have to connect to the container and restart Adguard with the correct parameters each time the add-on is started. There has to be a beter way, that I´m simply to dumb to figure out 😊

lilac jacinth
#

@fair dragon did you succeed on setting up NUT with two identical ups?

lilac jacinth
#

I also can't find a solution. The first usb ups is recognized but not the second. I've tried inserting any kind of value:serial, product name but always just the first is recognized. I think there could be a problem with the driver when configuring the port as "auto"

lilac jacinth
#

ok nothing i think is a problem of synology on how it handles usb

plucky olive
#

Woke up this morning to find DNS broken. Visiting the AdGuard page in Lovelace gives me a '502 - Bad Gateway'. I made sure hass.io was up to date, and also the OS. What am I still missing?

sly kindle
#

@plucky olive what do the Adguard addon logs say?

raven tinsel
#

@plucky olive which version of adguard

#

I've published a release with an issue this morning

#

which has been fixed/updated/patched already

#

do you use auto-update?

plucky olive
#

2021-08-12 08:12:27 WARNING (MainThread) [homeassistant.config_entries] Config entry 'AdGuard Home' for adguard integration not ready yet: Error occurred while communicating with AdGuard Home.; Retrying in background

raven tinsel
#

that is the integration, not add-on

#

anything in the add-on logs?

plucky olive
#

How do I get to the add-on logs?

#

I'm running core-2021.8.6

sly kindle
#

Go to the addon's page

raven tinsel
#

go to the add-on and hit the logs tab

sly kindle
#

Same place you configure it

raven tinsel
#

supervisor -> adguard -> log tab

plucky olive
#

2021/08/12 08:42:43.681091 [info] AdGuard Home, version v0.106.3
2021/08/12 08:42:43.690328 [error] Couldn't parse config file: invalid IP address: 192.168.1.160/24
2021/08/12 08:42:43.690399 [error] parsing configuration file: invalid IP address: 192.168.1.160/24
[08:42:44] INFO: Starting AdGuard Home server...

raven tinsel
#

yup

#

update

#

and if that automatically happened before, please disable auto-updates

plucky olive
#

Forgot about having to update in this area, too. Whoops.

raven tinsel
#

auto updates is nice and easy, but will also auto update you into a broken system (e.g., when a breaking change is released)

plucky olive
#

Yeah, that's why I don't do it for hass.io itself

#

as a developer on other projects I'm all too familiar with breaking change releases πŸ˜…

gusty fog
#

hey guys ! i recently installed myself a pi 4b with homeassistant running on it. i am totally new with this stuff so bear with me pls, maybe someone can help me here. i am trying to set up my homeassistant to be accessible via the internet using DUCK DNS and NGINX... i followed several installation guides, trying to use the newest ones available. thou, i just cant get this mess to work and i am rly desperate to find a guide that works with the newest releases available right now. any suggestions ?

gleaming grove
#

I'm trying to get Homematic to work on my Pi 3B and am currently stuck not being able to activate ttyAMA0.

#

I did remove serial console from the boot cmdline.txt and enabled the enable_uart and miniuart-bt that were already in the config.txt

#

in most documentation they seem to use pi3-miniuart-bt instead of miniuart-bt but that overlay does not seem to exist in the current RPi3 image.

#

Any tips are welcome

flint minnow
#

anyone using the grocy addon?

I'm trying to get it set up with all my products and stuff. I have added a handful of products while sitting at my desk, and want to go scan in what I already have... but whenever I scan a barcode and choose "add as barcode to existing product" (or scan a new barcode and want to make a new product) I get an error page.

this is when I'm using the HA app and web UI for the add-on. if I try to access the addon via a direct IP and port (set up in the addon config), I can login but it doesn't have any of my stuff I've already set up.

#

I was hoping to use the grocy app from the play store, but it seems it's out of date (even the beta) and doesn't support the latest grocy server

flint minnow
#

that was in a container install though, not sueprvised

terse moth
#

@gleaming grove are you trying to activate ttyAMA0 for z-wave, or for something else? I'm not seeing anything about ttyAMA0 on the homematic guide

#

also, are you sure it's supposed to be TTYAMA0 and not ttyACM0 or something like that? If you login to your pi and cd to /dev, and run ls -al what tty devices do you see?

gleaming grove
#

It depends on what kind of module you use for homematic. I have a serial one not the USB one.

terse moth
#

ah

gleaming grove
#

I have ttyACM0 too but that is my usb TI device for zigbee.

terse moth
#

how did you install HA to the PI?

gleaming grove
#

I used the image for the Pi3

#

With Etcher

#

From URL

#

I see ttyS0

#

But I believe that is used for Bluetooth on the Pi3 when you set miniuart-bt

gusty fog
terse moth
#

@gleaming grove Do you have a /dev/serial0?

gleaming grove
flint minnow
#

lol it seems Everytime anyone's ever asked about grocy in this channel (I searched) they never get an answer πŸ˜…

viscid orchid
#

you may get more attention in the addon Discord server

terse moth
# gleaming grove Not in the hardware list no.

Hmm, i'm not too sure 😦 Can maybe try disconnecting the otherdevices using serial to eliminate the possibility that your homematic device isn't connecting because something else is connected

gleaming grove
#

I'll try ttyS0 just to be safe

little rivet
#

My Smarter iKettle 3.0 just appeared on my doorstep. I guess I know what I'm doing for the next few hours. I assume the iBrew 0.0.9 is my best bet for integration?

viscid orchid
#

unless that's an addon, can't tell

little rivet
#

ok thanks. I assumed as it is in my /hassio/addon/9dd13c5f_ibrew/info folder

#

I assumed addon

viscid orchid
#

sounds right, but it must be from a custom repo

little rivet
#

I would love to know that there is something better

#

I get a bad feeling about this given the errors I'm getting

gleaming grove
#

nope ttyS0 does not work

little rivet
#

Well nevermind. For anyone interested, iBrew 0.0.9 only works on Mac or Windows platforms, and Smarter" indicate they arent releasing an API (or at least are non committal) until later this year at the earliest.

elfin nimbus
#

i'm using signal messenger addon and i guess it's working. is it possible for HA to listen for commands I give via Signal messenger and send the matching answer? e.g. i want to know the current gas prices

flint minnow
river temple
#

Is hvac an addon ? Did anyone get it to work as a remote for air condition?

viscid orchid
#

HVAC is an appliance

#

which probably connects to HA via an integration, but impossible to say without knowing which one

gleaming grove
#

I got the serial port ttyAMA0 working for Homematic if anyone searches for this do not enable this line in the configuration leave it commented out: "#dtoverlay=rpi-rf-mod" you only need "enable_uart=1" and "dtoverlay=miniuart-bt" not "dtoverlay=pi3-miniuart-bt".

clear harbor
pale willow
viscid orchid
#

(that was for searching for the answer!)

chrome vault
#

is there an addon for making remote access easy without the need for forwarding ports or configuring the router? other than nabu casa cloud.

viscid orchid
#

ZeroTier? I don't know anything about it, but I think that's an option

sly kindle
#

Needs ports

#

A port I mean

viscid orchid
#

ok, then no options, I guess

sly kindle
#

Tailscale

viscid orchid
#

oh, that's right

sly kindle
chrome vault
#

had never heard of this before

viscid orchid
#

lol:

#

Should there be a PR/issue unaddressed or a version bump that should be done more immediately - contact the author via Twitter DM.

#

as one does

sly kindle
#

Lol

#

I tried it. Worked fine.

#

For remote access of your HA or other things on your network. Not for SSL etc

elder oracle
#

Hi I am trying to setup a duckdns url. For some reason my url fails to connect to home assistant. My logs look fine apartfrom it saying (problems making Certificate Request). What is the issue?

fiery prism
#

Explain what steps you have done, in detail.

elder oracle
# fiery prism Explain what steps you have done, in detail.

I got my domain
I installed the duck dns addon
Filled in my secret token
In the addon config i added my domain https://mydomain.duckdns.org:8123
Accept terms is set to True
Filled in setup in configuration.yaml
Check Config
Restarted HA

sly kindle
#

@elder oracle did you actually enter https:// in the addon config?

elder oracle
#

Yes…

sly kindle
#

That would be wrong

#

Check the docs

#

Theres an example there. You only need the domain

elder oracle
sly kindle
#

Once you enter that http: config you can't use http://

#

https:// is all that will work

#

For local and for the duckdns address

#

How are you reaching the frontend now?

elder oracle
#

Now it saws "refused to connect" also it is still accesible by local ip. and my logs say this [22:45:48] WARNING: KO [22:45:49] INFO: Renew certificate for domains: *******.duckdns.org:8123 and aliases:

sly kindle
#

You also don't add the port in the config

#

Is that in there?

#

Your add-on config

elder oracle
#

Its not in any config, I restarted and its still accessible from the ip

sly kindle
#

In the addon config, what is now entered for domains: ?

#

You removed https:// from the front, yes?

#

But is there a port at the end?

elder oracle
sly kindle
#

And now you restart the addon and what happens in the addon logs?

elder oracle
sly kindle
#

Ok and now, your configuration.yaml

#

The http: config.

#

Can you share that here with formatting

elder oracle
#

Home assistant disconnected me from my ip view

sly kindle
#

After you restarted it?

elder oracle
#

yes, and the domain isn't workin either

sly kindle
#

Are you using https://

#

With either the local address or the duckdns address

elder oracle
#

Samba share should still work correct? I have the login saved on my other computer. (I am trying to connect to it now)

sly kindle
#

You should be able to reach it at this point but you have to use https

#

https://local_ip:8123

#

You'll get a warning in your browser

#

And yes samba should still work

#

No your actual ip address

elder oracle
#

sorry, yes I knew that

#

it says refused to connect

sly kindle
#

What's the IP?

elder oracle
sly kindle
#

Ok and when you use http:// ?

#

If http:// works, then you haven't entered the configuration.yaml part correctly

elder oracle
#

ok its back , let me get my config yaml

sly kindle
#

Which is where I wanted to go but you jumped ahead a bit

#

Share it here with formatting so it looks exactly as it appears in your configuration

elder oracle
sly kindle
#

No, the http: section of your configuration.yaml

elder oracle
#

oh... I don't appear to have one

sly kindle
#

Again, the docs for the addon...

elder oracle
sly kindle
#

Stick with local.

#

For now

elder oracle
sly kindle
#

You got a warning in the browser?

elder oracle
#

yes

sly kindle
#

Okay good

#

So now what port have you forwarded

sonic dagger
#

I have updated my Unifi controller to the latest version but it is not reachable anymore, someone an idea where to search the problem?

sly kindle
#

@elder oracle 443 to 8123?

elder oracle
sly kindle
#

Ok so try your duckdns address without 8123

elder oracle
#

" DNS address could not be found." (I don't know if it is relevant but I do have pihole setup)

#

Hold on, It works now

elder oracle
sly kindle
#

With 443 to 8123 you don't need :8123 at the end. If you were forwarding 8123 to 8123, you would need to have it

elder oracle
sly kindle
#

Yes. It won't be valid for the local address though

#

That is expected

elder oracle
sly kindle
burnt inlet
#

More people are having this problem, the update broke something. Logs are fine here but there's no access to the controller anymore.

viscid orchid
#

Frenck was working on it today

#

Try the suggestion in the last post there

sly kindle
#

@burnt inlet are you getting the schema options errors?

burnt inlet
sly kindle
#

Then you should check the addon config and remove the options that don't exist

#

Assuming that's not a bug πŸ€·β€β™‚οΈ

#

I don't use it but it sounds like the config for the addon has changed

viscid orchid
sly kindle
#

Ah right

viscid orchid
#

I was watching Frenck have fun debugging it on the addon discord server today

sly kindle
#

Hmm. Was it actually "fun frenck" or "annoyed frenck" ? πŸ˜‚

burnt inlet
stuck stirrup
#

Hey,
how do I find out which IP address my mqtt broker is using (Mosquitto broker addon)?

plucky wharf
#

Hello, Im trying to set up https with Lets Encrypt. I have a raspberry Pi running HA in docker and a small server which is routing Ipv4 traffic to my ipv6 address. The server is is routing port 80, 443, 8123. I installed Lets Encrypt under Supervisor and It is saying it was sucsesful but when im trying to acsses https://mysite.com or https://mysite.com:8123 im getting an error: The connection to this website is not secure. But when i try to acsses http://mysite.com:8123 it works.

lilac jacinth
#

if yes add this to configguration.yaml
http:
ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem

lilac jacinth
stuck stirrup
neat lily
#

Is there any other way to cancel/abort a snapshot than restarting the host? I accidentally left the "Create a snapshot of InfluxDB before updating" on and that snapshot takes about 6 hours to complete.

burnt crow
#

is it possible to use docker bind mounts on Home Assistant OS? I am trying to install a docker container through portainer with bind mounts, but keep running into the error Failure
error while creating mount source path '/config/docker/pihole/etc-pihole': mkdir /config: read-only file system

lilac jacinth
#

To anyone who is trying to setup two UPS on a synology NAS you can't directly. You must enable one and use it on synology ups software and the other one you can use it in home assistant

#

the first seem to be hardcoded on synology for exclusivity. Don't know why

valid bobcat
#

I have a problem with visual studio addon. When I try to enter visual studio I get a "401: Unauthorized" error. There is no problem on the phone

thick ibex
#

trying to setup deconz with a conbee2. ha finds it and its listed under options -> device. but when i choose it and tries to save it says Failed to save add-on configuration, Missing required option 'device' in deCONZ (core_deconz). Got {'device': None}

viscid orchid
valid bobcat
#

ty, now working πŸ˜„

#

I disabled firefox security for home assistant

dense oriole
#

I installed eWeLink to Home Assistant and it uses port 3000; but when I do it, says port is already in use. How to do find what add on is using port 3000?

last mica
#

I have two users in my home assistant how do I allow each of them to access grafana addon

finite inlet
#

how would i downgrade to a specific version of an addon? (using supervisor)

sly kindle
#

@finite inlet restore a snapshot of the addon

#

@last mica any admin has access to the addon

finite inlet
#

am i SOL

sly kindle
#

It automatically makes one. Did you tell it not to?

finite inlet
#

i'm not the smartest

#

yes

sly kindle
#

Only so much can be done to help. The automatic snapshot whenever you update an addon was an attempt to do that

finite inlet
#

all good no biggie

woeful hound
#

would this be the right spot to ask a question about key master from hacs?

fiery prism
glad obsidian
#

Anyone know of a calendar card the shows a week view? All I find are month or day views...

#

wrong channel...

quiet ice
#

Greetings to all, could anyone help me with garbage integration?

fiery prism
#

Which garbage integration?

tired zinc
#

anyone know why ESPHome wont install?

#

I just get a loading circle over the install button forever

#

nvm its decided to work after 20 mins lmao

quasi rapids
#

Hi friends, is the unify plugin not compatible with home assistant running on the pi4 anymore as of v1.0?

I wanted to upgrade the addon but getting the following message:

This add-on is not compatible with the processor of your device or the operating system you have installed on your device.

#

In the changelog they mentioned dropping 32bit support, but the pi4 is 64 bit right?

viscid orchid
#

If you’re using the 64-bit image, yes

#

You could have used either

#

configuration -> Info: CPU Architecture x86_64

quasi rapids
#

armv7l

#

It says

viscid orchid
#

Then you’ve been dropped

quasi rapids
#

Oh I guess that is the 32bit one

viscid orchid
quasi rapids
#

How did i manged to install the 32 bit version :'(

#

I have to do a reinstall I presume?

viscid orchid
#

Yes. You can take and restore a snapshot

quasi rapids
#

Going to do that, thanks!

eternal finch
#

Something went wrong with duckdns or nginx

#

Since this morning i cannot use https

#

And in pt discord im not the only one oO

azure bronze
#

Hi guys, is there some problems on the Dickens add-on?
Sometimes it works sometimes I cannot access HA from outside of my network

viscid orchid
#

DuckDNS?

rustic lichen
#

Yeahhhh I am also have issues with duckdns

#

I cant even ping my subdomain

elder ermine
#

Hi, i recently installed home assistant on WSL , and cant find the add-ons menu, i don't know if you have to enable it or anything? any help would be appreciated.Also, if anyone knows an add-on or related ideas to allow full 3 color control for WLED i would also greatly appreciate an insight as to how to do it

sly kindle
#

@elder ermine addons provide other server type services for the most part. You don't necessarily need them. #integrations-archived are what you are referring to, and there is a WLED integration. These are built in to Home Assistant. Add-ons are not.

fading wagon
#

I'm trying to get the Network UPS Tool add on working. I believe everything is working in the log, but it doesn't look like it is enabling port 3493. I can't find anything in the NUT documentation to enable the port. Anyone know what I'm missing?

viscid orchid
glass glen
#

hello, I am trying to use a container with portainer addon, but I can't find the volume associated with the mount point to deploy my configuration file... I`m running Home Assistant OS

glossy rune
#

Is this correct formatting for the Official SSH & Terminal Add-on? It automatically does this, but it looks wrong. ```authorized_keys:

    ssh-ed25519
    ADJFKAANAKaC1lZDIKADFJKSAJVAMAKJFAKSDKJBLAHBLAHKEY
    username@computer.local``` Specifically what I am referring to is this part - >-
#

Cus thats not how its formatted in the examples

#

I just pasted the pub key into the array and then the brackets disappeared and it made it like that.

viscid orchid
#

It’s fine

glossy rune
#

@viscid orchid I just ended up reformatting the SD.

#

And Im doing SSH first like I Should have before

viscid orchid
#

Ok

glossy rune
#

In the SSH Add-on do I need to set the host or can I leave it as Disabled

#

?

viscid orchid
#

Do you want to use something other than the web terminal?

#

Yes, you should expose a port

glossy rune
#

Whatdo you mean? Yeah I want to be able to access it from the outside web eventually.

#

But I dont necessarily need to do that now

viscid orchid
#

Then you answered your question πŸ™‚

glossy rune
#

yeah

#

But so for Host I should put my external IP?

viscid orchid
#

You put a port there

glossy rune
#

The formatting of this block of the UI is weird and Host is far left of the input area.

#

Ohhhh

#

Thanks man

#

youre a lifesaver

#

cus its not lined up right and this was the trouble i was having before

#

what username should I be attempting to login with? The one I created when I first accessed Supervisor? Or root? I've read the official setup docs. It doesn't specify.

#

ssh: Could not resolve hostname homeassistant.local:6666: nodename nor servname provided, or not known And 6666 is what I put where it previously said Disabled.

#

Even with the IP no worky. Ive setup and used SSH many times so this iskinda frustrating lol

#

I think maybe I described the section that said Disabled wrong because just to the left of that it has Docker tcp/22

#

And Host right above it.

#

Is this what you meant when you said a port goes in the spot?

#

MAybe it doesnt support ed25519

#

?

#

But thats what they use in the GitHub docs the official addon docs link to.

#

Fuck it, Im watching a YouTube walkthrough. Thank you for your time man. I really appreciate it.

#

Im gonna pay it forward though once I get the lay of the land.

sly kindle
#

@glossy rune you set the password in the add-on options

glossy rune
#

@sly kindle Yeah, that is what I Was wondering. So I should add username: and password: fields right? The key I generated has a password as well.

#

Thats what one guy did in one of thst YT walkthroughs

sly kindle
#

the password option is already there.

#

there are two ssh addons

#

depends on which you are referring to

#

the other one from the community repo allows for user and password

glossy rune
#

Official

sly kindle
#

the official one only allows for password

#

you'll be connecting as root

glossy rune
#

So what username should I be trying to connect with?

#

oh

#

ok

sly kindle
#

but this is root for the addon, which is a container.

glossy rune
#

Is the unofficial one buggy or anything?

#

Id rather specify a different username

sly kindle
#

no. the community one has more options

glossy rune
#

ok

#

Installing it now. Thank you

sly kindle
#

it can also be used with protection mode turned off which allows for using docker commands, where normally you can't do that

glossy rune
#

Rating is 1 though , damn , lol

#

they hatin

sly kindle
#

that's because it has more freedom to be misused. But it is still just running in a container and has limited access

glossy rune
#

misued in what way?

#

if you have time to answer that

sly kindle
#

I dont

glossy rune
#

np

sly kindle
#

read the addon's docs

glossy rune
#

i mean im familiar with ssh just not these addons. Yeah thats what im about to do.

sly kindle
#

these don't provide full access to the underlying host

glossy rune
#

I always read the docs first I dont just come here and blurt shit out, but Im kinda dyslexic so odd things confuse me sometimes

sly kindle
#

they are there to provide access to the default mapped directories and access to the custom commands for troubleshooting

glossy rune
#

yeah, thats whyi m setting it up.

glossy rune
#

ok thanks. I have the secrets documentation opened. I was going to do that next. Adding this to it

#

oh, I have one more question, you know how at the end of generated keys it puts the username@host of the machine youre on?

#

Should I remove that last part when adding to addon configuration?

#

I saw one guy had it removed, but the other examples just have ... and dont show the whole example key

viscid orchid
#

Doesn’t matter

glossy rune
#

I got it! I was forgetting the -p flag, lmao

#

Thanks folks!

#

Why is it though that I hav my key added and it still asked me to input password?

#

maybe im somehow using the official addon even though i installed the unofficial

viscid orchid
#

Maybe?

frozen agate
#

So I am trying to add the Reolink IP Camera integration from HACS, I've added the repository, installed the repository, and now according to everything I'm reading, I should be able to add it to my integrations but it is not showing up there. Anyone have any ideas on this?

viscid orchid
frozen agate
#

This would be an add-on wouldn't it since it's not native to HA

viscid orchid
#

No

dense spadeBOT
#

An add-on is a Docker container with tweaks to allow it to be configured in the Supervisor UI. It is only available in the Supervised installs (#330990055533576204 and #330944238910963714) since if you've used any other install method you're able to install software already.

viscid orchid
#

What you’re describing is an integration

frozen agate
#

Okay sorry

dense spadeBOT
#

Integrations integrate Home Assistant with devices or services, or provide functionality within Home Assistant. Add-ons provide additional software or services, which an integration could possibility integrate with. Add-ons are for Home Assistant OS and Supervised only, other install methods can install software other ways.

glossy rune
#

For the SSH add-ons can you use !secret and secrets.yaml? Are all configurations .yaml? And are they all in the same folder? I'm setting up secrets.yaml and I want to get a rough idea of the scalability.

#

Im guessing the SSH stuff is in /etc/ssh/sshd_config how it "normally" is?

glossy rune
#

Is this the correct change to make to configuration.yaml when using DuckDNS addon? http: ssl_certificate: /ssl/fullchain.pem ssl_key: /ssl/privkey.pem ?

#

Im getting an SSL cert error.

#

I think its because Im accessing it via homeassistant.local and the CN is for domain.duckdns.org but nothing loads when going to domain.duckdns.org with or without the port

#

Ive read many threads. Guess Ill just keep reading.

#

I think i figured it out. Router settings.

#

siiiiiick