Home Assistant App through Cloudflare Tunnel with Auth (Android)

[pillolola]

Hi, i’ve follow the guide, but with browser I can access to my instance of home assistant, but when I try to open the app, I receive an error that say " the certificate is not yet or is no longer valid, install a new credential on the phone and try again" without any possibility of choice which certificate it must use. What can I verify? I’m sure the certificate create on cloudflare is the only installed on phone.
can anyone help me?

[jaegerschnitzel]

@skykingjwc

Install the HA Cloudflared addon and establish a tunnel using the authors instructions.

One question. Should we setup local tunnel or remote tunnel? Or do both work?

[splintter]

Good tutorial, but unfortunately due to conflict of interests, iOS users are not able to use this way to protect their setups while allowing external access without paying for it.

There was a discussion on the PR:

Allow supplying client certificates

And it moved to this topic, but it will probably be ignored:

Secure communication channel for iOS app

Hello, this post is an effort to convey the interest from the community in having the possibility for securing communications between the iOS app and Home Assistant installations. The security requirements that such a feature would ideally satisfy are the following: R1) To be configurable in such a way to impact only the traffic between the app and the server R2) To allow management of the server-side security not necessarily inside Home Assistant, but also in a separate way R3) Allow (and …

Unfortunately, seems that community pressure will not work with this conflict as it involves Nabu Casa

[yafengwy]

Hi! Does that mean I won’t be able to access HA in my ios app with this method?

[eki78 (Clem)]

Hi, thanks a lot for your guide. It helped a lot.
But why do you need a WAF rule ?
I created 2 applications on cloudflare, one for web access with cloudflare PIN authentication and one for home assistant android app with certificate authentication and it’s work great. Doesn’t need a WAF rule. The only thing I had to do is to configure the access policy for web access to authorize only my mail.

[floppinab (Gavin Abfalter)]

Hopefully a question with a simple answer.

I have an iOS phone with a cloudflare tunnel through the Cloudflared addon that all works well.

My wife however has an Android phone!!!

Is there anyway to run the above setup in parallel with what I have existing there for iOS?

Thanks,

[skykingjwc]

Are you sure you are running the IOS App through Cloudflare. As far as I know that’s not currently possible, at least not with Cloudflare Auth enabled.