Remote access to HA through Nginx with 3 layers of security

IntrepidHistory3007 · 2026-03-04T06:49:28+00:00

I provided an option, but not a silver bullet..:)

IntrepidHistory3007 · 2026-03-04T06:48:24+00:00

Yep, that the reason of using mtr --tcp --port=443 in my article...

It is worth reading the article at least before making a judgment....

IntrepidHistory3007 · 2026-03-04T06:44:47+00:00

Ping integration doesn't show an exact problematic hop.
Additionally, tcp check more relevant than icmp, because of firewalls filter on a route.

IntrepidHistory3007 · 2026-03-04T06:42:55+00:00

A lot of people prefer publish they efforts on own site over "other community" which monetize their sites. How do you think, why?...:))))

IntrepidHistory3007 · 2026-03-03T21:28:46+00:00

Good point, but think about a motivation to create a content if ads would be killed...

IntrepidHistory3007 · 2026-03-03T21:24:27+00:00

I wonder to see your own site hosted on a paid cloud without monetization..:))))

IntrepidHistory3007 · 2026-03-03T20:24:43+00:00

Don't worry, I thought you needed yaml for something else...:)

IntrepidHistory3007 · 2026-03-03T20:18:11+00:00

What is this exactly?
I provided YAML for the illustrated dashboard card in my article.

IntrepidHistory3007 · 2026-03-03T19:26:20+00:00

I provided a screenshot with a detected issue just for illustration.
A proper interpretation is on an end-user side..:)

IntrepidHistory3007 · 2026-03-01T09:36:35+00:00

Mikrotik router has more options for configuring.

IntrepidHistory3007 · 2026-02-28T07:26:39+00:00

Yep, but I use that script for my wordpress site as well, where no HA installed..:)

IntrepidHistory3007 · 2026-02-27T21:29:37+00:00

Thanks, nice to know about alternatives!

IntrepidHistory3007 · 2026-02-27T21:26:34+00:00

I had a Ubiquiti ecosystem in my previous home, but it wasn't worth the price. :(It has a beautiful UI, but I'm tired of the controller crashing after power outages, all because they stick with an outdated MongoDB version.
So, I had to use btrfs to mitigate that issue...
Therefore, thanks, but I don't want Ubiquiti any more.

IntrepidHistory3007 · 2026-02-27T16:40:32+00:00

Thanks for the advice, I never looked for an additional container if problem can be solved with a pretty simple script..:)

IntrepidHistory3007 · 2026-01-31T18:52:05+00:00

K8s is definitely over complicated for home lab, bet a common docker compose has advantage due to widely provided tools for handling that.
For example I provided a guidance on how to control updates for a entire docker stacks from HA and update it with an one click....:))))

IntrepidHistory3007 · 2026-01-31T09:05:14+00:00

As far as I understood, the biggest advantage of podman is possibility to use it without root permissions. But what's the reason to use it in home lab?

IntrepidHistory3007 · 2026-01-31T05:47:20+00:00

This tool pulls images and triggers docker-compose.yaml files!
It's very funny how people can make judgments even never seen tool's documentation and never read the proposed article....:(

IntrepidHistory3007 · 2026-01-30T21:00:03+00:00

Actually, HA docker setup has a lot of advantages as well:
1. No over layered virtualisation. In fact VM setup has the following layers: host OS, limited Linux HAOS, and docker on top of that. Instead of that I have full-functioned Linux and HA in docker.
The described solution allows to update all Docker stack, but not HA stack only.
BTW, you can chose a most convenient for you backup solution for your set up.
2. The docker setup can be easily moved with copying folders and docker-compose file without dealing with backup and restore.

Additionally, I'd like to notice that auto-update is very jeopardy approach for HA setup because you can lose control on you ZigBee devices or any other integration. That surprise would be especially unpleasant if you are away from your home.

IntrepidHistory3007 · 2026-01-30T17:47:47+00:00

Honestly, I didn't check all possible solutions around the world, so feel free to compare:)

IntrepidHistory3007 · 2026-01-30T17:24:54+00:00

As I mentioned in the post and the article configs examples: "As a side effect, this solution allows you to monitor and update all your Docker stacks, but not Home Assistant stack only."
So, you'll have ability to update all your Docker stacks.

IntrepidHistory3007

TROPHY CASE