homeassistant

14853 readers

2 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 2 years ago

MODERATORS

GreatAlbatross@feddit.uk

greatalbatross@lemmy.world

Secure remote access (feddit.uk)

submitted 3 months ago by twinnie@feddit.uk to c/homeassistant@lemmy.world

12 comments fedilink hide all child comments

I know this probably comes up a lot and I’ve done some reading but it’s a little overwhelming so I thought I’d just post to help me get my thoughts together. I want to set up HA primarily to start using it with Frigate and give me remote access to my cameras but I might as well double down and get everything on this. I like the idea of clever houses and I’m glad there’s a good option for doing it locally with decent FOSS solution.

So in my network I have a sort of DMZ network. This network has all those dodgy IoT devices on it and it’s basically an untrusted network with internet access. I then have my normal network with everything else on it, like my laptop, phones, home server, etc. I’m planning on installing HA in a Podman container (Docker) on my server but I’d like to have some remote access so I can check out my cameras, 3D printer, and maybe a few other things, I’d also like to be able to receive notifications. However I still want to be able to run it normally without too many complications so I’d like it internal to my trusted network.

I’m thinking about the possibility of running two containers, one on my trusted network and one on my DMZ. I could sync them up or give them access to the same storage areas maybe. Is this possible? ChatGPT suggested it so I’m not sure if it’s worth pursuing. If not what are my other options? I basically want all the positives of having it on the internet with none of the negatives, how hard can that be?

you are viewing a single comment's thread
view the rest of the comments

[–] Xanza@lemm.ee 2 points 3 months ago

A DMZ is a decent idea, but you can do the same thing with vLAN and it would be less of a PITA.

I recommend just doing a vLAN and disable outside connection to your network. Use Wireguard to VPN in, and access local services via the VPN.

For notifications, you can use Gotify.

I’m thinking about the possibility of running two containers, one on my trusted network and one on my DMZ. I could sync them up or give them access to the same storage areas maybe.

It is, but it could/would cause huge complications when both containers attempt to access the same resource which is already in use. I wouldn't recommend running 2 containers from in the same location. It's a bit antithetical to what docker is used for.