I’ve failed at this in the past… failed hard. Completely locked all access from any network addresses twice. Its been a while and I’d like to try again but decided to ask for help this time.
Can anyone help tell me if its possible and how to / example of configuration.yaml section.
I’ve tried to use
What I would like to do it have no need for a userid and password if someone is in my home network or VPN BUT require a password or even 2 factor auth if on other/unknown network. 2FA isnt a requirement for me it would just be a nice to have if its easy enough to setup and use.
I use NABU CASA for remote access and have no issues there. Love it and don’t want to change anything on my iphone for that.
Will that allow password bypass for people in the ip ranges?
Will it also complete block all other access or just require a user name and password from outside those ranges?
Put home assistant above trusted networks. (see the above example from my config) Also pay attention to indentations. Also please format your code properly when posting, it helps those trying to help you. You need three back ticks before and after your pasted code. See the example below
Below is what I’m using with DuckDNS and NGINX. It allows only my laptop’s static IP to log in locally without requiring a password or 2-factor auth code. If I log in using any other IP address, either local or remote, it prompts for username and password, followed by the 2-factor auth prompt. In your case, the - 192.168.1.1/24 entry would do the same for any IP on that local subnet. I’m not sure what IP range is used when connecting with Nabu Casa. Be sure to add the - type: homeassistant entry, as that is what allows it to default back to the default login method if anything fails.
This is great thank you. I’m going to try tonight when I’m at home… I don’t trust myself enough to make this change while I’m not there in person. I’m also going to make sure I have remote file address to my VM as a back up.