Important note to all HADashboard V2 Beta Testers!

It seems that a number of you are so excited about HADashboard v2 that you want to run it everywhere - while this is understandable I wanted to inject a note of caution. HADashboard is currently not designed to be run on the open Internet. It does not support HTTPS and it has absolutely no security. If you open a port to Dashboard to the Internet, you are potentitally giving a clever attacker open access to your home automation system. They can read any status information (who is home, who is away?) or call any service (Open the garage door please HADashboard!).

The safest way to currently do this is using NGINX as a proxy to implement SSL and some authentication, under no circumstances should you just open a port straight in to HADashboard.

Hopefully it wasn’t a surprise to anyone what I just said, but it would be remiss of me not to mention it.

4 Likes