this post was submitted on 30 Mar 2026
28 points (93.8% liked)

homeassistant

18978 readers
412 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago
MODERATORS
GreatAlbatross@feddit.uk
greatalbatross@lemmy.world
28
How many of you have an HA solution, which is open to the internet? (lemmy.world)
submitted 1 day ago by oz1sej@lemmy.world to c/homeassistant@lemmy.world
48 comments fedilink hide all child comments
 

I'm running my own HA locally, in my house, but I would like to be able to access it also when I'm not home. So I've put it on my Zerotier One VPN, which works fine. Except for two things:

  1. HA no longer knows when I'm home - it thinks I'm always home;

  2. Other people in my household would also like to have remote access, but it's unrealistic to have them install and use the VPN.

So - can I just open it up, and rely on long, complex passeords? Or is that a complete no-go?

you are viewing a single comment's thread
view the rest of the comments
[–] HeyJoe@lemmy.world 2 points 1 day ago (2 children)

I have done something similar on mine but reversed. Instead of a whitelist I put together a rule to geo block all countries except the one I am in at the firewall. Before doing this I absolutely saw unknown traffic hit me constantly. With this in place it has been quiet ever since. You could probably narrow it down some more if you really feel like it's necessary. I know this is also hardee for some people to do since before I had this firewall I did not have an easy option to just block traffic like this.

[–] Coleslaw4145@lemmy.world 1 points 1 day ago

I do this as well, but another approach I was thinking about implementing (i havent tried it yet) was to also block all IP addresses not belonging to mobile networks or residential ISPs in my country.

That way, in theory, only a mobile network IP or somone on residential wifi would pass through my firewall to Home Assisstant, and this would filter out IPs belonging to datacentres which may be hosting hostile VPS's, Tor exit nodes, proxies, VPN exit points, etc, etc.

[–] tofu@lemmy.nocturnal.garden 1 points 1 day ago

Yeah that's a solid approach if you and your housemates are the only users.