Comment on How do you all handle security and monitoring for your publicly accessible services?
just_another_person@lemmy.world 10 months ago
Why? Not every service is meant to be exposed to the open internet. Immich is the only one of what you listed that makes sense to have out in the open.
I’ve been playing around with the voice assistant stuff in homeassistant and it seemingly needs a public url to get all the features. I could be wrong about that though?
I put authentik in front of immich to handle authentication so that I would need need a 2FA code
Most definitely does not need a public URL for Assist in HA. Not sure where you read that.
It sounds like you need a VPN to your internal services if you’re concerned about security.
Most definitely does not need a public URL for Assist in HA. Not sure where you read that.
You’re probably right. At one point, I had a subscription to homeassistant cloud a few years back to use a google nest speaker at the time. I was just going off that I guess. I’ll do some testing and will probably put it back behind tailscale. thanks for the heads up
It sounds like you need a VPN to your internal services if you’re concerned about security.
I’m more so concerned that I set something up incorrectly and would like to be made aware of it in the event someone else noticed
That’s very specific to individual services
jeena@piefed.jeena.net 10 months ago
What about home assistant? Me and the Family quite often use the HA app on the go, sometimes even from other computers like at my parents or in a hotel to check on the house and the cat. I also gave my dad access to it so he can see if we're at home and things like that.
Same with my dads HA.
hellothere@sh.itjust.works 10 months ago
Set up a VPN to get back inside your network if you’re outside it. Then you don’t need HA (or anything else for that matter) to be public.
just_another_person@lemmy.world 10 months ago
☝️
ShortN0te@lemmy.ml 10 months ago
HA had 2 security audits. I would not worry too much. Always depends on what you can control with it. home-assistant.io/…/security-audits-of-home-assis…