HassOS dissable firewall?

Hi. I installed Hass on VirtualBox following online instructions. (Home Assistant OS 13.0) Everything works great, except I can only access Influx and Grafana via GUI, but not locally using their native ports.

Example:
Influx:
Works: http://192.168.6.9:8123/a0d7b954_influxdb/ingress
Does not work: http://192.168.6.9:8086/

Grafana:
Works: http://192.168.6.9:8123/a0d7b954_grafana/ingress
Does not work: http://192.168.6.9:3000/

Vbox doesn’t have a firewall, network adapter is in bridge mode, so no external firewalls.

Does the HaasOS have built-in firewall? Can I turn it off or add rules somehow?

Thank you
Br,
Kd

example for grafana


Thank you for your reply.

When I change a port to 3000, addon will not start anymore.

Thank you

Strange, I’m using 10.0.0 with these setting, no problem starting up.

Grafana on my system is v11.0.0 (277ef258d4).

It’s not only grafana question. Same port blocking goes also for InfluxDB, MQTT etc. Something is preventing access. I assume it has to be HassOS firewall.

Br

I doubt HA OS has a firewall. Probably more to do with Virtualbox. I have open ports on Grafana, Influxdb, motioneye, OTBR and NUT add-ons, and all are accessible from anywhere on my network. But I do use proxmox, not virtualbox.

VirtualBox doesn’t have firewall. Network adapter is in bridge mode. All ports are open for HASS. Unless HASS addons (Grafana, InfluxDB) have default ports disabled by default. That would explain it.

On another Ubuntu server I have Grafana and the port can be changed directly in grafana.ini. I don’t know how to access grafana.ini in HassOS if possible at all.

Br

Ports are disabled in add-ons by default. You always have to open them yourself in the configuration of the add-on.

Correction. Grafana on my HASS is 10.0.0

That’s strange. The moment I change the port to 3000 or 3005 addon will not start.¸

What does the log say?

Home Assistant Core LOG

Logger: homeassistant.components.hassio
Source: components/hassio/websocket_api.py:135
integration: Home Assistant Supervisor (documentation, issues)
First occurred: August 18, 2024 at 2:36:16 PM (7 occurrences)
Last logged: 11:38:25 PM

Failed to to call /addons/a0d7b954_grafana/restart - Another job is running for job group addon_a0d7b954_grafana
Failed to to call /addons/a0d7b954_grafana/stats - Can't read stats from addon_a0d7b954_grafana: Expecting value: line 1 column 1 (char 0)
Failed to to call /addons/a0d7b954_grafana/stats - Container addon_a0d7b954_grafana is not running

Grafana LOG

Grafana
s6-rc: warning: unable to start service init-nginx: command exited 1
/run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information.
/run/s6/basedir/scripts/rc.init: fatal: stopping the container.
s6-rc: info: service grafana: stopping
[23:38:04] INFO: Service Grafana exited with code 256 (by signal 15)
s6-rc: info: service grafana successfully stopped
s6-rc: info: service init-grafana: stopping
s6-rc: info: service memcached: stopping
s6-rc: info: service init-grafana successfully stopped
[23:38:05] INFO: Service memcached exited with code 0 (by signal 0)
s6-rc: info: service memcached successfully stopped
s6-rc: info: service legacy-cont-init: stopping
s6-rc: info: service legacy-cont-init successfully stopped
s6-rc: info: service fix-attrs: stopping
s6-rc: info: service base-addon-timezone: stopping
s6-rc: info: service base-addon-log-level: stopping
s6-rc: info: service fix-attrs successfully stopped
s6-rc: info: service base-addon-timezone successfully stopped
s6-rc: info: service base-addon-log-level successfully stopped
s6-rc: info: service base-addon-banner: stopping
s6-rc: info: service base-addon-banner successfully stopped
s6-rc: info: service s6rc-oneshot-runner: stopping
s6-rc: info: service s6rc-oneshot-runner successfully stopped
s6-rc: info: service s6rc-oneshot-runner: starting
s6-rc: info: service s6rc-oneshot-runner successfully started
s6-rc: info: service base-addon-banner: starting

-----------------------------------------------------------
 Add-on: Grafana
 The open platform for beautiful analytics and monitoring
-----------------------------------------------------------
 Add-on version: 10.0.0
 You are running the latest version of this add-on.
 System: Home Assistant OS 13.0  (amd64 / qemux86-64)
 Home Assistant Core: 2024.8.2
 Home Assistant Supervisor: 2024.08.0
-----------------------------------------------------------
 Please, share the above information when looking for help
 or support in, e.g., GitHub, forums or the Discord chat.
-----------------------------------------------------------
s6-rc: info: service base-addon-banner successfully started
s6-rc: info: service fix-attrs: starting
s6-rc: info: service base-addon-timezone: starting
s6-rc: info: service base-addon-log-level: starting
s6-rc: info: service fix-attrs successfully started
[23:38:41] INFO: Configuring timezone (Europe/Belgrade)...
s6-rc: info: service base-addon-log-level successfully started
s6-rc: info: service base-addon-timezone successfully started
s6-rc: info: service legacy-cont-init: starting
s6-rc: info: service legacy-cont-init successfully started
s6-rc: info: service init-nginx: starting
s6-rc: info: service init-grafana: starting
s6-rc: info: service memcached: starting
s6-rc: info: service memcached successfully started
[23:38:42] INFO: Starting Memcached...
s6-rc: info: service init-grafana successfully started
s6-rc: info: service grafana: starting
s6-rc: info: service grafana successfully started
[23:38:42] FATAL: 
[23:38:42] FATAL: SSL has been enabled using the 'ssl' option,
[23:38:42] FATAL: this requires an SSL certificate file which is
[23:38:42] FATAL: configured using the 'certfile' option in the
[23:38:42] FATAL: add-on configuration.
[23:38:42] FATAL: 
[23:38:42] FATAL: Unfortunately, the file specified in the
[23:38:42] FATAL: 'certfile' option does not exist.
[23:38:42] FATAL: 
[23:38:42] FATAL: Please ensure the certificate file exists and
[23:38:42] FATAL: is placed in the '/ssl/' directory.
[23:38:42] INFO: Starting Grafana...
[23:38:42] FATAL: 
[23:38:42] FATAL: In case you don't have SSL yet, consider getting
[23:38:42] FATAL: an SSL certificate or setting the 'ssl' option
[23:38:42] FATAL: to 'false' in case you are not planning on using
[23:38:42] FATAL: SSL with this add-on.
[23:38:42] FATAL: 
[23:38:42] FATAL: Check the add-on manual for more information.
[23:38:42] FATAL: 
s6-rc: warning: unable to start service init-nginx: command exited 1
/run/s6/basedir/scripts/rc.init: warning: s6-rc failed to properly bring all the services up! Check your logs (in /run/uncaught-logs/current if you have in-container logging) for more information.
/run/s6/basedir/scripts/rc.init: fatal: stopping the container.
s6-rc: info: service grafana: stopping
[23:38:42] INFO: Service Grafana exited with code 256 (by signal 15)
s6-rc: info: service grafana successfully stopped
s6-rc: info: service init-grafana: stopping
s6-rc: info: service memcached: stopping
s6-rc: info: service init-grafana successfully stopped
[23:38:43] INFO: Service memcached exited with code 0 (by signal 0)
s6-rc: info: service memcached successfully stopped
s6-rc: info: service legacy-cont-init: stopping
s6-rc: info: service legacy-cont-init successfully stopped
s6-rc: info: service fix-attrs: stopping
s6-rc: info: service base-addon-timezone: stopping
s6-rc: info: service base-addon-log-level: stopping
s6-rc: info: service fix-attrs successfully stopped
s6-rc: info: service base-addon-timezone successfully stopped
s6-rc: info: service base-addon-log-level successfully stopped
s6-rc: info: service base-addon-banner: stopping
s6-rc: info: service base-addon-banner successfully stopped
s6-rc: info: service s6rc-oneshot-runner: stopping
s6-rc: info: service s6rc-oneshot-runner successfully stopped