{"id":8371,"date":"2024-09-27T16:53:33","date_gmt":"2024-09-27T07:53:33","guid":{"rendered":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8371"},"modified":"2024-09-27T16:57:44","modified_gmt":"2024-09-27T07:57:44","slug":"home-assistant-reverse-proxy","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8371","title":{"rendered":"Home Assistant Reverse Proxy"},"content":{"rendered":"\n1.Home Assistant \uc5d0\uc11c Reverse Proxy \ud5c8\uc6a9<\/strong>

  vi \/var\/homeassistant\/homeassistant\/configuration.yaml
----------
# Enable Reverse Proxy
http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 10.10.10.0\/24
    - 127.0.0.1

# Enable WebSocket
websocket_api:
----------



2. apache2 \uc124\uc815 \uc608\uc81c<\/strong>

  echo \"Listen 443\" >> \/etc\/apache2\/ports.conf
  a2enmod proxy_wstunnel
  vi \/etc\/apache2\/sites-available\/hass_reverse_proxy.conf
----------
###########################################################<\/span>
# \/etc\/apache2\/sites-available\/hass_reverse_proxy.conf<\/span>
#<\/span>
# Add the following to Home Assistant's configuration.yaml:<\/span>
###########################################################<\/span>
#http:<\/span>
#  use_x_forwarded_for: true<\/span>
#  trusted_proxies:<\/span>
#    - 10.10.10.0\/24<\/span>
#    - 10.10.10.108<\/span>
#    - 127.0.0.1<\/span>
#<\/span>
#websocket_api:<\/span>
###########################################################<\/span>

<VirtualHost _default_:443><\/span>
  ServerName localhost:443<\/span>

  ErrorLog \"${APACHE_LOG_DIR}\/home_assistant_error.log\"<\/span>
  TransferLog \"${APACHE_LOG_DIR}\/home_assistant_access.log\"<\/span>

  SSLEngine on<\/span>
  SSLCertificateFile  \/etc\/ssl\/opizero\/certs\/ssl-cert.crt<\/span>
  SSLCertificateKeyFile \/etc\/ssl\/opizero\/private\/ssl-cert.key<\/span>

  ProxyPreserveHost On<\/span>
  ProxyRequests off<\/span>

  ProxyPass \/api\/websocket ws:\/\/10.10.10.108:8123\/api\/websocket<\/span>
  ProxyPassReverse \/api\/websocket ws:\/\/10.10.10.108:8123\/api\/websocket<\/span>
  ProxyPass \/ http:\/\/10.10.10.108:8123\/<\/span>
  ProxyPassReverse \/ http:\/\/10.10.10.108:8123\/<\/span>

  # fix websockets for addons and apis<\/span>
  RewriteEngine On<\/span>
  RewriteCond %{HTTP:Upgrade} websocket [NC]<\/span>
  RewriteRule ^\/?(.*) \"ws:\/\/10.10.10.108:8123\/$1\" [P,L]<\/span>
<\/VirtualHost><\/span>
----------
  a2ensite hass_reverse_proxy
  systemctl restart apache2



3.ngix \uc124\uc815 \uc608\uc81c<\/strong>

  vi \/etc\/nginx\/sites-available\/hass_reverse_proxy
----------
###########################################################<\/span>
# \/etc\/nginx\/sites-available\/hass_reverse_proxy<\/span>
#<\/span>
# Add the following to Home Assistant's configuration.yaml:<\/span>
###########################################################<\/span>
#http:<\/span>
#  use_x_forwarded_for: true<\/span>
#  trusted_proxies:<\/span>
#    - 10.10.10.0\/24<\/span>
#    - 10.10.10.108<\/span>
#    - 127.0.0.1<\/span>
#<\/span>
#websocket_api:<\/span>
###########################################################<\/span>

server {<\/span>
    listen [::]:443 ssl default_server http2 ipv6only=off;<\/span>
    server_name 'hasu0707.duckdns.org';<\/span>

    # These shouldn't need to be changed<\/span>
    add_header Strict-Transport-Security \"max-age=31536000; includeSubdomains\";<\/span>
    ssl_protocols TLSv1.2;<\/span>
    ssl_ciphers \"EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4\";<\/span>
    ssl_prefer_server_ciphers on;<\/span>
    ssl_session_cache shared:SSL:10m;<\/span>
    proxy_buffering off;<\/span>

    location \/ {<\/span>
        proxy_pass                          http:\/\/localhost:8123\/;<\/span>
        proxy_http_version                  1.1;<\/span>
        proxy_redirect                      http:\/\/ https:\/\/;<\/span>
        proxy_cache_bypass                  $http_upgrade;<\/span>
        proxy_set_header Connection         \"upgrade\";<\/span>
        proxy_set_header Host               $host;<\/span>
        proxy_set_header Upgrade            $http_upgrade;<\/span>
        proxy_set_header X-Forwarded-Host   $host;<\/span>
        proxy_set_header X-Forwarded-Port   $server_port;<\/span>
        proxy_set_header X-Forwarded-Proto  $scheme;<\/span>
        proxy_set_header X-Forwared-For     $proxy_add_x_forwarded_for;<\/span>
        proxy_set_header X-Real-IP          $remote_addr;<\/span>
    }<\/span>

    # self signed certificate<\/span>
    ssl_certificate '\/etc\/ssl\/opizero2\/certs\/ssl-cert.crt';<\/span>
    ssl_certificate_key '\/etc\/ssl\/opizero2\/private\/ssl-cert.key';<\/span>
}<\/span>

server {<\/span>
    # managed by Certbot<\/span>
    if ($host = 'hasu0707.duckdns.org') {<\/span>
        return 301 https:\/\/$host$request_uri;<\/span>
    }<\/span>

    listen 80;<\/span>
    server_name 'hasu0707.duckdns.org';<\/span>

    # managed by Certbot<\/span>
    return 404;<\/span>
}<\/span>
----------
  ln -s \/etc\/nginx\/sites-available\/hass_reverse_proxy \/etc\/nginx\/sites-enabled\/hass_reverse_proxy
  systemctl restart nginx
<\/span>\n","protected":false},"excerpt":{"rendered":"

1.Home Assistant \uc5d0\uc11c Reverse Proxy \ud5c8\uc6a9   vi \/var\/homeassistant\/homeassistant\/configuration.yaml———-# Enable Reverse Proxyhttp:  use_x_forwarded_for: true  trusted_proxies:    – 10.10.10.0\/24    – 127.0.0.1 # Enable WebSocketwebsocket_api:———- 2. apache2 \uc124\uc815 \uc608\uc81c   echo “Listen 443” >> \/etc\/apache2\/ports.conf  a2enmod proxy_wstunnel  vi \/etc\/apache2\/sites-available\/hass_reverse_proxy.conf———-############################################################ \/etc\/apache2\/sites-available\/hass_reverse_proxy.conf## Add the following to Home Assistant’s configuration.yaml:############################################################http:#  use_x_forwarded_for: true#  trusted_proxies:#    – 10.10.10.0\/24#    – 10.10.10.108# […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[93],"tags":[],"class_list":["post-8371","post","type-post","status-publish","format-standard","hentry","category-computing_iot"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8371","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8371"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8371\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8371"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8371"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8371"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}