How do I disable ha > CLI REPL that it enters on boot or put it behind a password? I don't want anyone who has physical access to the HAOS host to be able to just type in CLI commands with a keyboard hooked up to it without having to enter some sort of password or something first.
#Disable HAOS's CLI on boot
ancient dagger
odd coyote
You could try to mask this service via kernel args: https://github.com/home-assistant/operating-system/blob/b3755e9f451839642f4280c77c5d9a8f8112e315/buildroot-external/rootfs-overlay/usr/lib/systemd/system/ha-cli%40.service#L26
I.e systemd.mask=xxx.service.
https://developers.home-assistant.io/docs/operating-system/configuration#bootargs
Why is this accessible to everyone?
weary gazelle