29
How many of you have an HA solution, which is open to the internet? (lemmy.world)
submitted 7 months ago by to c/homeassistant@lemmy.world
47 comments fedilink hide all child comments
 

I'm running my own HA locally, in my house, but I would like to be able to access it also when I'm not home. So I've put it on my Zerotier One VPN, which works fine. Except for two things:

  1. HA no longer knows when I'm home - it thinks I'm always home;

  2. Other people in my household would also like to have remote access, but it's unrealistic to have them install and use the VPN.

So - can I just open it up, and rely on long, complex passeords? Or is that a complete no-go?

you are viewing a single comment's thread
view the rest of the comments
[–] 6 points 7 months ago (4 children)

What I personally do is have it accessible over WireGuard. Open TCP ports to the Internet is a bad idea. This does mean you have to launch WireGuard every time, but it’s way more secure

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [+] 5 points 7 months ago (3 children)
    [removed by mod]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 7 months ago

    Same, I use wgtunnel with autostart when I'm not on my home wifi. The only time I have to think about it is when I'm trying to see devices on others' networks (ex. Chromecast/apple tv/etc), but that's much less common than just always wanting access to my home services.

  • permalink
  • fedilink
  • source
  • parent
    • load more comments (-1 replies)