Hi,
I have Home Assistant 2026.1 and I have NGINX and let's encrypt add-on for secure HTTP. It works perfectly 😀
So that, I opened port 8123 on my router to access remotely to my HA server. This also works!!
Currently, I face an attack from an unknown IP address that I would like to ban.
I have seen it's possible through ACL in NGINX but I cant't access to NGINX web interface UI.
I tried through port 81 on my HA server but it does not responds.
Looking at opened port through netstat, I did not see 81 port.
Any clue ?
Thanks for help!!
#Access to NGINX Web interface
wraith estuary
kind parrot
nginx does not have a web ui for configuration, all configuration is done using text files. Are you using the "NGINX Home Assistant SSL proxy" add-on for HAOS?
wraith estuary
nginx does not have a web ui for configuration, all configuration is done using ...
Yes!
kind parrot
That add-on does allow you to add additional configuration files that it will use, but unfortunately I don't know exactly where you're supposed to put them.
wraith estuary
OK, thanks for the info. I saw some documentation about the possibility to manage ACL in NGINX but it may be in an another environment. I 'll try differently. Thanks for your support!!
kind parrot
Should note that port 8123 actually bypasses the nginx add-on and connects directly to home assistant. you shouldn't expose that port publicly - only expose port 443.
since port 8123 does not support HTTPS, it's unencrypted.
port 443 is the standard port for secure https:// URLs.
wraith estuary
port 443 is the standard port for secure `https://` URLs.
Thanks for that info!! So I have to open 443, close 8123 and then forward 443 it to HA_IP:8123 ?
kind parrot
no, forward port 443 to ha port 443
If you go into the NGINX add-on configuration at the bottom there is a "Network" section, and by default it should show that it's set to use port 443
your home assistant UI should be accessable via https://homeassistant.yourdomain.example.com with no port number (replace with the domain name that you set up with letsencrypt) when everything is working.