Error notifciation Login attempt failed in HA

Configuration
1

I get last time error notification in HA as below, what is the problem?

Login attempt or request with invalid authentication from core-nginx-proxy.local.hass.io

I am using the DuckDNS and nginx proxy.

2

Someone tried to access Home Assistant with the wrong credentials.

3

Are there on HA any log where i can see from which IP that is?

4

Yes, by adding the following to configuration.yaml

http:
  use_x_forwarded_for: true
  trusted_proxies: 
    - 172.19.0.7

Where 172.19.0.7 is the IP of the container running NGINX. I assume you’d need to put 127.0.0.1 there as you are using the add-on on the same machine as Home Assistant, but I’m not sure.
You also need the following line in the NGINX config to forward the headers

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Currently it will always show the address of the NGINX proxy server.

5

Where do i really put in the config of NGINX Home Assistant SSL proxy addon?

proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

NGINX is installed via Home asssitant addons, just it is on the same machine. Do i need to put 127.0.0.1 ?

6

In the location part, here’s my full config for the location part

location / {
		proxy_set_header Host $host;
		proxy_redirect http:// https://;
		proxy_http_version 1.1;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_pass http://ip-of-ha-instance:8123;
	}

I would say so,you need to try.

7

I think i have another sort of addon

my config is now as below but when i put the location at the end Home assistant say invalid config.

domain: mydomain.com
certfile: fullchain.pem
keyfile: privkey.pem
hsts: max-age=31536000; includeSubDomains
cloudflare: false
customize:
  active: false
  default: nginx_proxy_default*.conf
  servers: nginx_proxy/*.conf
8

I don’t run any add-on, I run it as a docker container.

Do you have any files like nginx_proxy....conf in the /share directory of your Home Assistant configuration? From the docs of this addon it looks like the config files should be stored there.

9

Checked that but no any files related configs or something like that.

10

I’m sorry, I don’t know how it works with the add-on. I assume you can put a file called nginx_proxy_default.conf in there and add the configuration. But I’m just guessing. This is my full config file as a reference:

map $http_upgrade $connection_upgrade {
    default upgrade;
    ''      close;
}

# redirect all traffic to https
server {
	listen 80;
	server_name *.yourdomain.com;
	return 301 https://$host$request_uri;
}

############### Home Assistant ####################
server {
	listen 443 ssl default_server;

	server_name ha.yourdomain.com;

	# enable subfolder method reverse proxy confs
	include /config/nginx/proxy-confs/*.subfolder.conf;

	# all ssl related config moved to ssl.conf
	include /config/nginx/ssl.conf;

	proxy_buffering off;

	location / {
		proxy_set_header Host $host;
		proxy_redirect http:// https://;
		proxy_http_version 1.1;
		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
		proxy_set_header Upgrade $http_upgrade;
		proxy_set_header Connection "upgrade";
		proxy_pass http://ip-of-ha-instance:8123;
	}

}


# enable subdomain method reverse proxy confs
include /config/nginx/proxy-confs/*.subdomain.conf;
# enable proxy cache for auth
proxy_cache_path cache/ keys_zone=auth_cache:10m;