Hi all, So I had it working, for like 5 min… then did something and for the life of me couldn’t figure it out. always ended with a 400: bad request. eventually ended adding 0.0.0.0/0 as trusted proxy, which then allowed me to access the HA via browser on computer using my https://ha . url (registe…

You’re welcome :hugs: (mark solved?)

its of little help if you have browser to Cloudflare encrypted and then clear text on port 80 from Cloudflare to router. that 2nd leg is most of the time more critical as thats where they come and look what you up to, thats your exposure point, opening port 80 on your FW. this works perfectly with …

If you just look at your Home Assistant logs when you get a 400 bad request, it will have a line that says that it rejected a connection from an IP address (which it will tell you) which was not configured as a trusted proxy. So you will be able to figure out if it’s complaining about an internal IP…

i’m bad at logs, where are these ? let me look. asking as Configuration : Logs is not showing anything 10.0.0.1 is the LAN IP on My Modem 10.0.0.2 is the WAN IP on the pgSense G [Screen Shot 2021-10-16 at 15.10.41]

Your trusted proxies should be: trusted_proxies: - 10.9.116.254 - 173.245.48.0/20 - 103.21.244.0/22 - 103.22.200.0/22 - 103.31.4.0/22 - 141.101.64.0/18 - 108.162.192.0/18 - 190.93.240.0/20 - 188.114.96.0/20 - 197.234.240.0/22 - 198.41.128.0/17 - 162.1…

any idea where this must be set ? I"m digging… in front end there was the option to enable “Use “forwardfor” option” which I’ve now unticked. still getting invalid certificate on mobile devices through, thinking there was 2 issues maybe, the 400 and the cert on mobile app on cell phone. G [im…

think I found something that might be pointing to the problem, as it seems we got the browser based https stable. the mobile works on a socket: [image] Reverse Proxy with HAProxy Community Guides Because this seems the first hit on Google for HA and HAProxy I want to sh…

[image] georgelza: still getting invalid certificate on mobile devices What is the certificate presented by cloudlfare? If it’s the letsencrypt one, you might encounter an issue like Home assistant Android App and Let’s encrypt certificate - Mobile Apps - Home Assistant Community (home-assi…

it’s the ACME generated lets_encrypt, but the mobile app is iOS. G

One of the replies mentioned iPad… PS. BTW, using ACME in place of “certificate” or “Let’s Encrypt” is not correct. ACME is just the protocol used to obtain and renew the certificates with Letsencrypt.

Chris, true… but I also mentioned the ACME generates the lets_encrypt cert. we’re a apple house, all the mobile devices are iOS. Believe my problem is related to the web sockets, getting them working. looking for a clear explanation, what to enable how and where. All I really want to work is the…

HA behind pfSense with Cloudflare

Configuration

georgelza (George) October 16, 2021, 1:58pm 15

think I found something that might be pointing to the problem,
as it seems we got the browser based https stable.
the mobile works on a socket: