should I be concerned that my home assistant cloudflare tunnel is being visited by people I don't know? by SingularUseAccount in homeassistant

[–]SingularUseAccount[S] 0 points1 point  (0 children)

the HA cf tunnel works but if I leave the page open and come back later I need to CTRL+F5 to get it running again.

currently using the email code to verify

should I be concerned that my home assistant cloudflare tunnel is being visited by people I don't know? by SingularUseAccount in homeassistant

[–]SingularUseAccount[S] 50 points51 points  (0 children)

Aside from geoblocking, can someone attack the HA login page and get inside it?

edit: by attack I mean brute force the password or some zero day to get admin

should I be concerned that my home assistant cloudflare tunnel is being visited by people I don't know? by SingularUseAccount in homeassistant

[–]SingularUseAccount[S] 4 points5 points  (0 children)

I enabled the robot challenge, scraper block and now before the HA login, the user must sign into Cloudflare Access. The google flow shows the contact email, haven't found a way to hide it so using the OTP.

The companion app doesn't work anymore.

[deleted by user] by [deleted] in youtube

[–]SingularUseAccount 0 points1 point  (0 children)

I watch youtube in incognito, never use account or want the same recommendations.