I installed Home Assistant on a VM under | Home Assistant | Page 1

random vigil Jan 16, 2024, 12:19 AM

#

imo add a cert to nginx and let that handle the cert
i dont use NPM, i use swag container, but whats is your config?

worn rover Jan 16, 2024, 12:35 AM

#

I did that... I got a wildcart cert, set up a proxy host in NPM. But when I try to access it, I get 400 Bad Request

#

A lot of online guides suggest adding trusted_proxies in some config yaml but I don't know where/how to do this

random vigil Jan 16, 2024, 12:43 AM

#

worn rover A lot of online guides suggest adding `trusted_proxies` in some config yaml but ...

you have to add it to your HA configuration.yaml

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 10.0.0.1/32 # your proxies IP
  ip_ban_enabled: true
  login_attempts_threshold: 5

worn rover Jan 16, 2024, 12:55 AM

#

While looking through this, I saw this page: https://www.home-assistant.io/integrations/http/#reverse-proxies

#

Do I need to install the HTTP integration?

#

I tried to look for it but it doesn't show up on the Add Integration options

random vigil Jan 16, 2024, 1:15 AM

#

no this is a manual config, just paste it at the top level in your configruation.yaml

worn rover Jan 16, 2024, 1:44 AM

#

okay, that worked great!

#

Next question -- because my ngnix proxy manager and my home assistant are on different machines, I'd like to have SSL connection between them too

#

Maybe with a self-signed certificate

#

Can you point me to where I should look at ?

random vigil Jan 16, 2024, 1:52 AM

#

why do you need a cert between them?

#

i wouldnt know where to do that since i dont have a cert for HA. theres no reason for a cert on my own lan

#

i would google for how to add a cert to HA though

worn rover Jan 16, 2024, 1:53 AM

#

because they're on lan but through wifi, and it's not that hard to do man in the middle attacks on wifi

#

ok, let me look for it. Thanks

random vigil Jan 16, 2024, 1:53 AM

#

if someones on your wifi or attacking you than have bigger issues

worn rover Jan 16, 2024, 1:54 AM

#

Yeah true. But it's generally a good idea to secure most of my network to be encrypted rather than un-encrypted

#I installed Home Assistant on a VM under