Oh, now that sounds interesting - is it tricky to setup WireGuard VPN at home and use it to ‘tunnel’ into my LAN when away from home? Can you point me at any reasonably comprehendible guides?
I have an rpi2b sitting in a drawer, an rpi0w already running Pi-hole, and an rpi4b running RaspberryPi OS with a 2nd HomeAssistant in a docker. I’ve also got a Win11 PC running VirtualBox - so plenty of places to put a WireGuard server isn’t there?
UPDATE: I did some Googling. Is it necessary for your WireGuard VPN server to have a static IP address from your ISP? I use 4G broadband at home, so my IP address on the internet changes all the time and because they use CGNAT I dont think I have a public facing IP address. Sorry for being off the thread topic.
UPDATE2: Seems not having a public IP address & being behind my ISPs CGNAT, means it’s not easy to use a VPN tunnel into my network (looks like various workarounds using reverse tunnels & assorted cloud services). I think I’ll stick to this excellent HomeAssistant ZeroTier integration as it seems to do everything I need.
Try Hassos Addon - Cloudflare Argo Tunnel
This allows exposing your HA instance under a domain (or subdomain) and to apply security (including 2FA).
Sadly there is no official addon, but hopefully, it will be added at some point
I played around with ZeroTier over night and was quite impressed with it.
My LAN IP range is 192.168.2.x
My brothers LAN IP range is 192.168.1.x
I installed ZeroTier on his Plex server (where Wireguard is also installed). and added him to the network. I installed ZeroTier on my Raspberry Pi (where Wireguard is installed) and added that to the network.
Then I made his assigned ZeroTier IP static, 10.241.x.1
And then I added a new route: 192.168.1.0/24 via 10.241.x.1
And sure enough now I can access anything on his LAN from my LAN (to do this with Wireguard, I would typically have to tell Wireguard to send ALL traffic over the VPN, meaning while connected I would lose access to my own network resources)
EDIT: There is a wee bit more work involved in making that work, but a chunk of it was already done when I set up Wireguard. There are some firewall rules that need to be added to the “exit” node.
I live in the Netherlands and I am trying to manage an HA install in the USA.
I’ve installed Zerotier on the HA instance in the USA and created an account on the ZeroTier webpage.
There, I created a new network and let the HA instance connect to it.
I’ve installed the Zerotier client on my Windows PC here in NL and let that client connect to the created Zerotier network.
When I type in the assigned Zerotier address from the HA instance in my browser in NL I can connect to the frontend of HA. So one might think it works!
However, when I try to FTP / SMB into the HA instance it refuses me to.
Tried a lot and even disabled my Windows Firewall without any luck.
Can anyone give me a little guidance on how (or even if) I can send an HTTP POST webhook trigger to my HomeAssistant which is configured to be part of a ZeroTier network?
In the past, I could configure Port-forwarding in my router and with a DDNS service, I could trigger a HomeAssistant webhook Automation to run by sending an HTTP POST request (eg. something like http://myddns.com:8123/api/webhook/<webhook_id>)
However, my current ISP uses CGNAT so my home network is not allocated an external IP address on the internet, so Port Forwarding is useless to me. I’ve got the ZeroTier add-on working in my HomeAssistant and I can access it remotely using the ZeroTier network allocated local IP address from any client that also is part of my ZeroTier network, but I want to know if I can trigger a HomeAssistant webhook Automation using some sort of ZeroTier public URL for my configured ZeroTier network (if that makes sense?)
Basically, I want to run a HomeAssistant Automation from a device like Amazon Alexa by sending a webhook HTTP POST request via my ZeroTier network.
Hi All, I have a question about routing between zeroteir and physical lan using HA.
I have several tasmota devices and some other devices with a web interface on my LAN, and would like to access them from my phone while away from home.
My iphone has problems with zerotier over Wifi, but it works well over 4G. I suspect it has something to do with the ZT+Wifi+Apple combo, not with the zerotier HA-addon.
My brain doesn’t compute with anything apple… i remember trying to print some tickets from my wifes macbook once! i tried until she was ready to leave 3hrs later… she did it in 30seconds. i still dont understand why the print button for the word app is in the start menu for the whole computer
But anyway, I have had a few times where it just wont work, it shows connected but doesn’t allow network access, but disconnecting Zerotier and reconnecting seems to fix the problem.
is it just home assistant you cant access on the remote network? or can you not connect to any devices on the remote network?
Noticed my HA instance was inaccessible via ZeroTier, but the host was still showing as ONLINE on the ZeroTier website. I locked in the logs for the addon and it was JUST solid:
recv: Connection reset by peer
recv: Connection reset by peer
recv: Connection reset by peer
recv: Connection reset by peer
recv: Connection reset by peer
recv: Connection reset by peer
recv: Connection reset by peer
I lost connection via ZeroTier since last week. The last time I was connecting was on Wednesday 08/03 - with no issue. Yesterday I tried with no success. On ZeroTier panel both nodes are online, but mobile app can’t connect. Today I spotted that in the meanwhile was update of this add-on. Any one has similar issue?
I restarted system several times, installed all system updates - no result. In the log there is nothing at all.
[18:34:10] INFO: Starting ZeroTier One…
s6-rc: info: service legacy-services successfully started
[18:34:10] INFO: Starting ZeroTier One…
s6-rc: info: service legacy-services successfully started
connect: Host is unreachable
connect: Host is unreachable
connect: Host is unreachable
connect: Host is unreachable
connect: Host is unreachable
connect: Host is unreachable
