Ingress access for Tandoor recipes

lovelylain · April 16, 2024, 3:41pm

Install Tandoor recipes and Nginx Proxy Manager add-ons and start them, no need to expose port for the Tandoor recipes add-on.
Open <config>/homeassistant/addons_config/tandoor-recipes/config.yaml, add REMOTE_USER_AUTH: 1, then restart the Tandoor recipes add-on.
Open Nginx Proxy Manager webui, add hass.example.com to access http://homeassistant:8123, tandoor.example.com to access http://db21ed7f-tandoor-recipes:8080. Edit the tandoor item add custom location / with configuration:

set $hass_url $scheme://hass.example.com;
auth_request /_/auth;
auth_request_set $auth_cookie $upstream_http_set_cookie;
auth_request_set $login_url $hass_url$upstream_http_location;
add_header Set-Cookie $auth_cookie always;
error_page 401 =302 $login_url;
proxy_set_header Remote-User admin;
proxy_hide_header X-Frame-Options;

add advanced configuraion:

location = /_/auth {
  internal;
  proxy_pass http://homeassistant:8123/api/ingress/_/auth;
  proxy_pass_request_body off;
  proxy_set_header Content-Length "";
  proxy_set_header X-Ingress-Name tandoor_recipes;
  proxy_set_header X-Original-URI $request_uri;
}

Install ingress integration, add ingress configuration:

ingress:
  tandoor_recipes:
    work_mode: auth
    title: Tandoor recipes
    icon: mdi:silverware-fork-knife
    url:
      match: (\w+://)hass(\..+)
      replace: $1tandoor$2
      default: https://tandoor.example.com

Now you can access Tandoor recipes from HA sidebar without extra login. If you open http://tandoor.example.com/ when HA not logged in, it will automatically redirect to the HA login page.

alexbelgium · April 16, 2024, 4:06pm

Thanks, great how-to! I didn’t knew this was possible