[solved] External access not assigned correctly

Configuration
1

Hello,

I use HomeAssistant in a Docker container on my Raspberry Pi. I have set up a WireGurad VPN to my Hetzner server there (where I have the IP 10.0.2.2). An Nginx Proxy Manager is running on my Hetzner server, which forwards all requests from home.domain.tld (this is not my domain, but I don’t want to write it openly :slight_smile: ) to 10.0.2.2:8123.

I want to allow access from outside only for my user (tuxilio) and not for all other users. I have activated “Local access only” for these users.

user
user1285×978 49.8 KB

Then I added the IP of the proxy in my configuration.yaml:

http:
  use_x_forwarded_for: true
  ip_ban_enabled: true
  login_attempts_threshold: 3
  trusted_proxies:
    - 10.0.2.1

However, if I go to home.domain.tld, I can still log in with this user.

I have also tested setting my external URL under /config/network, but this has no effect.

How can I change this?

2

VPNs are used to connect a device or network to another device or network as if it was a local connection.

Your access control should therefore be placed on the VPN service instead of the HA service.