Trusted networks when using NGINX Reverse proxy?

Configuration
7

I just stumbled upon this thread and perhaps this information is no longer relevant for you, but i at least wanted to help other people having this problem.

From what i understand you are using a reverse proxy and homeassistant on the same box. You also say you have another reverse proxy for your LAN. So there are 2 ways you can go about this.

Using local reverse proxy and local DNS

So in this situation you should either set up a local dns server wich would point your lan clients to te lan ip of your homeassistant box or add an entry to every client you want to have access without password. Some routers have this functionality natively, if you use Tomato or dd-wrt you can add to an entry to dnsmasq.conf on your router. (Like this: address=/<YOURDOMAIN>/<your box ip>) You also need the proxy to be configured to send the X-forwarded-for header, this is documented in the examples in the home assistant documentation.

You then need to configure home assistant. Set the following entries:

  use_x_forwarded_for: True
  trusted_proxies:
    - 127.0.0.1
  trusted_networks:
    - 192.168.1.0/24

depending on your networks ip adresses e.g. if your router is 10.0.0.1 use 10.0.0.0/24.

Using existing reverse proxy

Assuming this one is on another box, you would have to set homeassistant a bit differently:

  use_x_forwarded_for: True
  trusted_proxies:
    - 127.0.0.1
    - <proxy ip>
  trusted_networks:
    - 192.168.1.0/24

(I also assumed you had a host file / dns entry for this proxy set up because it was already reachable from your clients.)

Hope this helps!

3 Likes