My Home Assistant configuration… IT’S ALIVE

ntalekt · May 7, 2018, 4:52pm

Can’t update my previous thread so I’m starting a new one.

Updates since last post (Nov. 2017):

New Devices

New Automations

Turn on SleepTime mode if Xiaomi Aqara Smart Wireless Switch is pressed.
Pause Deluge if internet data usage > 90%.
Put Nest Thermostats in away mode when patio door is open for 10min.
Toggle office fan on/off based on occupancy using * Wemo Insight Smart Plug.
Pushbullet if new network device is detected.

New Components

Full Configuration

Automations

Notification Audio

~~TTS “Good Morning” notification over all Sonos speakers. Includes templated date, birthday countdown, weather, to-do’s etc.~~
TTS “Welcome home User” notification over all Sonos speakers.
TTS notification when User arrives at specific Zones.
TTS notification when User leaves specific zones which includes travel time home.
TTS notification if the garage door has been open for 30 minutes with no motion in garage.
TTS test notification

Notification Text

Pushbullet notification when new Home Assistant version is available on PyPI.
Pushbullet notification when Nest thermostats go into Home/Away modes.
Pushbullet notification when critical network devices go offline.
Pushbullet notification if the garage door is left open after we left the house.
Pushbullet notification if the garage door is opened and no one is home.
Pushbullet notification if the garage door has been open for 30 minutes with no motion in garage.
Pushbullet notification test.
Pushbullet when SSL certificate expiration sensor <= 10 days.
Pushbullet when any battery sensor falls below 20%
Pushbullet for a failed login attempt.
Pushbullet if new network device is detected.

Notification Visual

LG WebOS TV Notification when Ring Pro Doorbell detects motion or is pressed.

Lights

Exterior lights (GE Z-Wave Plus Dimmer 14294) on 5 minutes before sunset.
Exterior lights (GE Z-Wave Plus Dimmer 14294) off 30 minutes after sunrise.
Exterior lights (GE Z-Wave Plus Dimmer 14294) dim to 35% at 9:00pm
Interior Media Center lights (Yeelight WIFI RGB Strip) using Amazon Echo Dot via Emulated Hue Bridge.
Interior loft lights (Hue White Bulb) using Amazon Echo Dot via Emulated Hue Bridge.
Holiday interior lighting leveraging Google Calendar Event to define the holiday.
Holiday interior lighting using Amazon Echo Dot via Emulated Hue Bridge.
~~Interior loft lights (Hue White Bulb) on at 30% 60 minutes before sunset if home.~~
~~Interior loft lights (Hue White Bulb) off at 8:10pm.~~
~~Interior Media Center lights (Yeelight WIFI RGB Strip) on at sunset.~~
~~Interior Media Center lights (Yeelight WIFI RGB Strip) off at 8:00pm.~~
~~Interior Media Center lights (Yeelight WIFI RGB Strip) on if motion detected after 8:00pm.~~
~~Interior Media Center lights (Yeelight WIFI RGB Strip) off if motion not detected for 5min after 8:00pm.~~

Doorbell

Exterior lights to 100% if Ring Pro Doorbell detects motion or is pressed after 9:00pm.
Exterior lights back to 35% after 30 minutes after doorbell motion or press.

Media

Start Harmony Hub activity if user selects from HA UI input_select.
Update input_select status if physical Harmony Hub remote is used to start activity.
Start playing music on Sonos PLAY:1 speakers if user selects music station from input_select.
Start playing music on Sonos PLAY:1 speakers if user starts music station using Amazon Echo Dot via Emulated Hue Bridge.
Start Harmony Hub activity using Amazon Echo Dot via Emulated Hue Bridge.
Power off Harmony Hub activity using Amazon Echo Dot via Emulated Hue Bridge.
Turn on SleepTime mode if Xiaomi Aqara Smart Wireless Switch is pressed.
Pause Deluge if internet data usage > 90%.

Sonos

Reset/Regroup all Sonos PLAY:1 speakers at 6:00am every morning.
Group all Sonos’ button.

Occupancy

If motion is detected via BRUH Automation multisensor or Amcrest cameras turn on input_boolean (used in binary_sensor for occupancy tracking).
If no motion is detected after certain period of time turn off input_boolean.

Sleep time

Turn off master TV after 30 minutes via [Harmony Hub](https://www.amazon.com/gp/product/B00BQ5RYI4/ref=as_li_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=B00BQ5RYI4&linkCode=as2&tag=ntalekt0c-20&linkId=ef1edfe63776ff2e3b5b4e7fdf8e3488.

System

Run script to collect Cox Internet usage hourly.
Clean the TTS cache weekly.

Vacation/Climate

Turn vacation mode on when household is gone for 24 hours.
Put Nest Thermostats in away mode when vacation mode active.
Put Nest Thermostats in away mode when patio door is open for 10min.
Toggle office fan on/off based on occupancy using * Wemo Insight Smart Plug.

Scripts/Customizations

Life360 integration via shell mqtt broker found here
~~Home Assistant mysql database size sensor found here~~ Using the SQL Sensor now.
Cox internet usage web parser script found here
WAN test script found here

Devices

Climate

Nest Thermostat x2

Lighting

Sensor / Switch

Camera

Media

Amazon Echo Dot x2 (via Emulated Hue Bridge)
Sonos PLAY:1 x3
Sonos One
Harmony Hub x2
NVIDIA SHIELD TV
LG 65UH8500 65" TV

Network

https://github.com/ntalekt/homeassistant/raw/master/images/home-screenshot.jpg

Jhonathan · May 8, 2018, 4:03pm

Amazing!!!

Thank you for having shared your HA ALIVE

digiblur · May 8, 2018, 8:28pm

More ideas!! YES! I saw your Cox usage thing and it had me curious. Would you mind sharing how it is done along maybe some of your other scripts I saw you call on?

Robban · May 8, 2018, 9:07pm

He has put a link to his GitHub

digiblur · May 8, 2018, 9:27pm

Must have missed it on his Git. Will look again.

digiblur · May 9, 2018, 2:35am

Ahh…it was in the readme which is why I missed it. I downloaded the zip while I was at work expecting it to be in there. Different branch I see…

NightRanger · May 9, 2018, 6:25am

@ntalekt Thanks for sharing!

Your system in its current configuration may be vulnerable to authentication bypass

This section in your configuration.yaml

http:
  api_password: !secret ha_password
  trusted_networks:
    - 192.168.1.0/24
    - 127.0.0.1
  ip_ban_enabled: True
  login_attempts_threshold: 3
  use_x_forwarded_for: True

I warned about it here almost a year ago and yesterday an issue was opened in the HA git by a concerned user

github.com/home-assistant/core

Security issue, unauthorized trusted access by spoofing x-forwarded-for header

opened 05:21PM - 08 May 18 UTC

closed 01:16PM - 28 Jun 18 UTC

ayavilevich

**Home Assistant release with the issue:** 0.68.1 but probably older versions t…oo **Last working Home Assistant release (if known):** N/A **Operating environment (Hass.io/Docker/Windows/etc.):** Hassbian but should be applicable to other deployment methods **Component/platform:** http **Description of problem:** There is a bug in HA that in certain conditions will allow a person to spoof a trusted source address and bypass password authentication. Conditions: - “trusted_networks” is defined with IP values - “use_x_forwarded_for: True” - A reverse proxy is used (i.e nginx) - Attacker can guess one of the IPs in the trusted list (i.e. 127.0.0.1) - API password is set (or else there is nothing to bypass) Use case: Attacker adds a spoofed x-forwarded-for header with an IP that is in the trusted list. HA grants access without asking for a password. Cause: https://github.com/home-assistant/home-assistant/blob/master/homeassistant/components/http/real_ip.py#L22 Uses the first IP in the header which can be spoofed. Only the last IP in the header is guaranteed to be non-spoofed assuming a valid reverse proxy is in place. https://en.wikipedia.org/wiki/X-Forwarded-For : Format : _“where the value is a comma+space separated list of IP addresses, the left-most being the original client, and each successive proxy that passed the request adding the IP address where it received the request from. In this example, the request passed through proxy1, proxy2, and then proxy3 (not shown in the header). proxy3 appears as remote address of the request. Since it is easy to forge an X-Forwarded-For field the given information should be used with care. The last IP address is always the IP address that connects to the last proxy, which means it is the most reliable source of information. X-Forwarded-For data can be used in a forward or reverse proxy scenario.”_ **Problem-relevant `configuration.yaml` entries and (fill out even if it seems unimportant):** ```yaml http: # Secrets are defined in the file secrets.yaml api_password: !secret http_password use_x_forwarded_for: True trusted_networks: - 127.0.0.1 ``` **Traceback (if applicable):** ``` ``` **Additional information:** Work around: Disable trusted_network setting, remove reverse proxy or limit network access to authorized individuals only. Problem first noticed first by https://community.home-assistant.io/u/NightRanger . Reference: https://community.home-assistant.io/t/trusted-networks-and-x-forwarded-for/20850 I would issue a PR but I don’t have the right environment to test this. Hopefully somebody who uses this setup can apply the fix and test it.

I would remove the x-forwarded-for and trusted networks from the configuration when using reverse proxy.

FezVrasta · May 11, 2018, 6:37pm

What’s the “guest mode”?

ntalekt · May 20, 2018, 1:11pm

Right now guest mode doesn’t do much but I was thinking based on if we have a guest or not I would use it to modify some of the automations for our downstairs.

Robbrad · December 15, 2018, 10:32pm

Amazing! great work - any chance you will be sharing how you did your Grafana setup - its amazing!