Home Assistant Remote access Solution |


root@raspberrypi:~# netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      327/connmand        
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      470/sshd: /usr/sbin 
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      751/exim4           
tcp        0      0 127.0.0.1:6010          0.0.0.0:*               LISTEN      821/sshd: root@pts/ 
tcp        0      0 127.0.0.1:6011          0.0.0.0:*               LISTEN      877/sshd: root@pts/ 
tcp        0      0 127.0.0.1:6012          0.0.0.0:*               LISTEN      909/sshd: root@pts/ 
tcp6       0      0 ::1:53                  :::*                    LISTEN      327/connmand        
tcp6       0      0 :::22                   :::*                    LISTEN      470/sshd: /usr/sbin 
tcp6       0      0 ::1:25                  :::*                    LISTEN      751/exim4           
tcp6       0      0 ::1:6010                :::*                    LISTEN      821/sshd: root@pts/ 
tcp6       0      0 ::1:6011                :::*                    LISTEN      877/sshd: root@pts/ 
tcp6       0      0 ::1:6012                :::*                    LISTEN      909/sshd: root@pts/ 
tcp6       0      0 :::6600                 :::*                    LISTEN      1/init

after #hass -v


root@raspberrypi:~# netstat -ntlp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      327/connmand        
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      423/sshd: /usr/sbin 
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN      712/exim4           
tcp        0      0 127.0.0.1:6010          0.0.0.0:*               LISTEN      768/sshd: root@pts/ 
tcp        0      0 127.0.0.1:6011          0.0.0.0:*               LISTEN      839/sshd: root@pts/ 
tcp        0      0 0.0.0.0:8123            0.0.0.0:*               LISTEN      822/python3.9       
tcp        0      0 127.0.0.1:6012          0.0.0.0:*               LISTEN      881/sshd: root@pts/ 
tcp6       0      0 :::6600                 :::*                    LISTEN      1/init              
tcp6       0      0 ::1:53                  :::*                    LISTEN      327/connmand        
tcp6       0      0 :::22                   :::*                    LISTEN      423/sshd: /usr/sbin 
tcp6       0      0 ::1:25                  :::*                    LISTEN      712/exim4           
tcp6       0      0 ::1:6010                :::*                    LISTEN      768/sshd: root@pts/ 
tcp6       0      0 ::1:6011                :::*                    LISTEN      839/sshd: root@pts/ 
tcp6       0      0 :::8123                 :::*                    LISTEN      822/python3.9       
tcp6       0      0 ::1:6012                :::*                    LISTEN      881/sshd: root@pts/

John

状态: 楼主
回帖总数: 6317

私人讯息

发表于: 2 年前

#3758 引用

1

In my reverse proxy i had to delete:
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Well it does work. I’d suggest the x_forwarded_for is misconfigured in the proxy as that is supposed to pass through the real IP address instead of the proxy.

That is not a solution, and actually one of the few cases we can’t detect.
Strongly recommended NOT to delete the X-Forwarded-For, you are creating a security issue for yourself.

Home Assistant only listen to 127.0.0.1 will forbid direct accesses.

Home Assistant should be told to only trust headers coming from the NGINX proxy.

Otherwise, incoming requests will always come from 127.0.0.1 and not the real IP address.

John

状态: 楼主
回帖总数: 6317

私人讯息

发表于: 2 年前

#3759 引用

John

状态: 楼主
回帖总数: 6317

私人讯息

发表于: 2 年前

#3760 引用

Home Assistant default port



netstat  -anp  |grep 8123

output


root@vultr:~# netstat  -anp  |grep 8123
tcp        0      0 0.0.0.0:8123            0.0.0.0:*               LISTEN      11965/python3