4 ms·
I suppose this validates my strategy of exposing as little attack surface as possible. One SSH port with password auth disabled, one HTTPS port that greets you
by solarkraft 4y ago
I suppose this validates my strategy of exposing as little attack surface as possible. One SSH port with password auth disabled, one HTTPS port that greets you with an authentication request.
> In case one is not able to upgrade the Home Assistant Supervisor or the Home Assistant Core application at this time, it is advised to not expose your Home Assistant instance to the internet.
I would advise anyone to not expose things meant for your local network to the internet unprotected, ever.
- aaomidi 4y agoHonestly this is why I use tailscale with everything. I don’t trust these implementations anymore. Tailscale all the things!
- idatum 4y agoAn SSH tunnel is my strategy as well. The only internet port I have open is an OpenBSD sshd with a low privilege chroot'd user, SSH key auth only. I tunnel from my Android device using an SSH client app. The only port open to HA is localhost on the client.