Secure remote access using the DuckDNS Add-On in Home Assistant .

Поделиться
HTML-код
  • Опубликовано: 10 сен 2024

Комментарии • 108

  • @pitor87
    @pitor87 3 года назад +1

    I like the level of detail you explain. Not only what we need to do, but also why.

  • @ngreed
    @ngreed 3 года назад +2

    Thanks Chris! This is the best video for setting up duckDNS that I have seen to date.

  • @jjohnn1950
    @jjohnn1950 3 года назад +1

    I finally gave up and installed Node-Red and within Node-Red used the DuckDns Node which seems to be working will. I have it setup to send my Router IP address to DuckDns every 5 minutes. Now I can get to my HA on my PI 4 remotely via my cell phone. And of course I setup port forwarding in my home router to get to my PI 4. I guess we can say there is more than one way to skin a cat.

    • @mostlychris
      @mostlychris  3 года назад

      Definietely more than one way! Nabu Casa is yet another way, as is using Nginx reverse proxy. Glad you found a solution that works for you. Curious though, what did you give up on? What was the issue you were having?

  • @kapilmaru7897
    @kapilmaru7897 Год назад

    If we don't have static WAN IP, in this case can we use this DuckDNS because WAN IP will change randomly, We can't port forward in this scenario

  • @dionaea973
    @dionaea973 2 года назад

    Thanks Chris !! I followed many tutorials but I missed the necessity to open port 8123 - some tutorial speek about 80 & 443 but it didn't work... Thanks to speak also about the order of the different actions, I use to get the configuration issue too !

    • @mostlychris
      @mostlychris  2 года назад

      Excellent. Glad it's working!

  • @encostablanca
    @encostablanca 3 года назад +1

    Hi, since latest core update 2021.7.0 there seems to be a breaking change with proxy or something.. Can't access anymore remotely with this set up.
    Could you please make a video what needs to be configured now?

    • @mostlychris
      @mostlychris  3 года назад +1

      Yes. There is a breaking change noted. I have not yet upgraded to 2021.7 because I haven't gone through all the breaking changes. I'm not sure what might be misconfigured but make sure you have the configuration settings in the http section as noted below (from their breaking changes section on the website).
      Home Assistant will now block HTTP requests when a misconfigured reverse proxy, or misconfigured Home Assistant instance when using a reverse proxy, has been detected.
      If you are using a reverse proxy, please make sure you have configured use_x_forwarded_for and trusted_proxies in your HTTP integration configuration.
      For more information, see the HTTP integration documentation.
      Additionally, access to Home Assistant from the same IP address as a trusted proxy will be rejected if the request is marked as forwarded.

    • @encostablanca
      @encostablanca 3 года назад +1

      @@mostlychris has something to do with this yes

  • @TheKelvinLachica
    @TheKelvinLachica 3 года назад

    Hi Chris. Are you able to access your home assistant using the external ip or duckdns address while you are internally connected? I have a modem that does not support NAT loopback. I am wondering if this is still possible just by using SSL.

    • @mostlychris
      @mostlychris  3 года назад

      I use AdGuard and I set a DNS rewrite that sends it to the internal address of the HA device while on my local network.

  • @miguelgarcia-vg1fh
    @miguelgarcia-vg1fh 3 года назад

    What should I put for the "current ip"? I run HA OS on raspberry pi4 so I use a browser on my personal laptop to connect to HA.

    • @mostlychris
      @mostlychris  3 года назад

      The DuckDNS add-on will determine your public facing IP address and report it back to the DuckDNS DNS servers. Whey you type in your domain into a browser, it will direct the browser to that public facing IP address. You don't need to fill anything in on the "Current IP" on the DuckDNS site when setting this up. I was just pointing out that it figures out whatever public facing IP is on the network you are on when completing the steps in the video.

  • @sharicebrown7070
    @sharicebrown7070 3 года назад

    @mostlychris. Hi. Everything is correct in HA but I'm not sure if my forwarding is correct on my internet. I have att modern BGW210. Can you please help?

    • @mostlychris
      @mostlychris  3 года назад

      Hey Sharice. Are you able to reach your HA instance with the DuckDNS domain? I don't have one of those but found this www.att.com/support/article/u-verse-high-speed-internet/KM1215101/

  • @francisdzifa3633
    @francisdzifa3633 2 года назад

    how did you get to the YAML file in Vs Code i was able to download VS code but no able to use it because i got stuck

    • @steveklein9335
      @steveklein9335 2 года назад

      I also have this issue. Running 2022.04.07 version of homeassistant and I can't find where to configuration.yaml file is to copy/paste that ssl certificate to

    • @mostlychris
      @mostlychris  2 года назад

      Use the file editor add-on. VS Code requires that you access your device with Samba or other file sharing. My drive H: is mapped to my HA config directory so I can easily get to it.

  • @mateusz4561
    @mateusz4561 3 года назад +1

    Chris, thank you for the great video! Can you explain how to configure HA and DuckDNS to use IPv6? I assume port forwarding is not necessary then.

    • @mostlychris
      @mostlychris  3 года назад

      I think this is going to depend greatly on your ISP and router. In addition, your DNS provider will need to be able to add AAAA records (which any reputable one should). After that, your ISP has to have provided you an IPv6 address block. If all of that is available, then with the sheer number of IPv6 addresses available and theoretically routed to your HA location, you should be able to use one address for every device you could ever use in your location. That was a long way around to say--do you have the necessary prerequisites to use IPv6 publicly at your location?

  • @oscar7126
    @oscar7126 2 года назад

    Important to check if you have private or public IP. I had private ip (ipv4) and had to contact my ISP to get a public IP. There is a lack of available ip adresses so the ISP starting with privat ip and let people share public ips as I understand.

    • @mostlychris
      @mostlychris  2 года назад +1

      I wonder how common that is. CGNAT is what I've heard of. Maybe that is what you had.

    • @oscar7126
      @oscar7126 2 года назад

      @@mostlychris In Sweden it seems to be common from all popular ISP.

    • @mostlychris
      @mostlychris  2 года назад +1

      I don't like it.

  • @bwallace5692
    @bwallace5692 2 года назад

    Thanks for the vid. Trying to set up remote access but cannot seem to port forward via my Asus RT-AX86U router. From a quick google search I found out that Starlink (my ISP) uses CGNAT and apparently port forwarding is not allowed. There is a reference that Starlink will be making IPv6 available at which no port forwarding will be needed. This part is greek to me so any insight would be appreciated. I am curious if I could make use of the HA Cloud until IPv6 is available. Thanks

    • @mostlychris
      @mostlychris  2 года назад

      Nabu Casa should make this possible (HA Cloud). CGNAT is evil. You can also use something like tailscale and create an endpoint on your HA device to connect from other remote devices. I've got a video on tailscale. I've been told that it can handle CGNAT.

  • @dustinleibach4835
    @dustinleibach4835 3 года назад

    Hi, using a Unifi network. To setup port forwarding do I require a Unifi security gateway?

    • @mostlychris
      @mostlychris  3 года назад

      You don't have to have a USG. I assume by your question that you are using another router. Just do you port forwarding in that router.

    • @dustinleibach4835
      @dustinleibach4835 3 года назад

      @@mostlychris I have Unifi ap but on that step it says I require a Unifi security gateway. I just wanted check if you had one, so I know if I might need to look at getting one

    • @mostlychris
      @mostlychris  3 года назад

      @@dustinleibach4835 Port forwarding is done at the router level and not at the AP. You don't need to buy a USG if you are running a different router. If you are using the ISP provided router, you'll have to figure out how to access the interface to config it (if possible).

  • @MuhammadUsman-ji9dq
    @MuhammadUsman-ji9dq 3 года назад

    It's really good work but i could not able to configure my TP-LINK router for port forwarding. could you please tell me how would I do that ?

    • @mostlychris
      @mostlychris  3 года назад

      What model of router do you have?

  • @drumstick9000
    @drumstick9000 2 года назад

    i wish emulated hue still worked with port 8300. 80 is in use by hue, so nginx proxy won't work for me

  • @fred7flinstone
    @fred7flinstone 2 года назад

    I am not sure if we need to have NGINX running with DuckDNS or not.

    • @mostlychris
      @mostlychris  2 года назад +1

      I think you are referring to the Nginx reverse proxy. Later versions of DuckDNS add-on have that built in so you don't need both.

  • @t11gr
    @t11gr 2 года назад

    please how do i fix my home assistant not coming on

    • @mostlychris
      @mostlychris  2 года назад

      Hello Francis. Not sure. I'd need some more info on what you are seeing.

  • @Tarikmoe
    @Tarikmoe 3 года назад

    Great video. I followed everything step by step but duckdns would not work for me. I can’t bring up HA outside network. I have tplink router. I hate it lol. I am not sure it has port forwarding capabilities

    • @chotaa02
      @chotaa02 3 года назад

      Port forwarding is named differently among different brands. Check for "Virtual Servers" in router settings.

    • @mostlychris
      @mostlychris  3 года назад

      Yes. So many different routers with different configuration options. You'll have to research how to configure forwarding on your particular model.

  • @TheAlphaInfamous
    @TheAlphaInfamous 2 года назад

    Hi Chris, thank you for a great video. I tried setting up but unable to reach though my duck dns, I have UDM PRO and have set up fixed IP and Local DNS record for the client. udm pro is connected to ISP gateway.

    • @mostlychris
      @mostlychris  2 года назад

      Are you trying to connect remotely to a URL using DuckDNS? This might be a better discussion on Discord so that I can see you response.

    • @TheAlphaInfamous
      @TheAlphaInfamous 2 года назад

      @@mostlychris Thank you. I instead went with Cloudflare since I already have domain with them and simply configured a sub-domain to do me deeds and it simply works like a charm.

    • @mostlychris
      @mostlychris  2 года назад

      Excellent!

  • @tmisulica
    @tmisulica 3 года назад

    Hi Chris. If i dont have a public IP adress from my provider can I reach my HA thru duck dns or any type of service ? To note that even if I do a "what is my ip" search I do see an public IP however is not my own public IP, it belongs to me and onther set of users of my provider.

    • @mostlychris
      @mostlychris  3 года назад

      Are you double NATd by your ISP?

    • @tmisulica
      @tmisulica 3 года назад

      @@mostlychris thanks for your response. I think so. I cannot reach from outside to my router on any ports when i use the public ip adress found when running what's my ip websites ...

    • @mostlychris
      @mostlychris  3 года назад

      Who is your isp?

    • @tmisulica
      @tmisulica 3 года назад

      I lve in Middle East. Is a local ISP.

    • @mostlychris
      @mostlychris  3 года назад

      Sounds like this might be an issue. You can try Nabu Casa which will might allow you to reach your local HA instance. That is a different solution than I present here, but each individual has a different environment and use case so you might need to go that route.

  • @jjohnn1950
    @jjohnn1950 3 года назад

    I can't install DuckDNS on my Pi 4 using HA. No matter which way I try it my PI crashes and I have to re-flash my card every time to start over. It only crashes when I make the changes to the Configuration.yaml file and restart the server. I never see the check configuration button either.

    • @mostlychris
      @mostlychris  3 года назад

      I replied to your other comment asking what the issue was before seeing this comment. You have to enable advanced mode to use the check config and server controls. In Home Assistant, you can find it under your profile (your avatar at the very bottom of the page). It does sound like there is a config issue that is causing startup to fail. Guessing, of course, with the limited info I have based on your description.

    • @jjohnn1950
      @jjohnn1950 3 года назад

      @@mostlychris Thanks for letting me know that is when I set the advanced mode that the check configuration shows up. I just assumed it was always there. I just installed DuckDNS again and it seems to be OK up to this point. Log since all went well. Then I pasted in the HTTP stuff and restarted and all was well. Did the check Configuration and it posted Valid!
      But when I tried to restart the Server it never can reconnect again.

    • @mostlychris
      @mostlychris  3 года назад

      Just to clarify...you did get it working or still having the connection issue? Can you hit me up in Discord with details?

    • @jjohnn1950
      @jjohnn1950 3 года назад +1

      @@mostlychris Yes Chris. Everything is working well. Thanks.

    • @charlespizzeck2595
      @charlespizzeck2595 2 года назад

      @@jjohnn1950 I am having this same issue. New to HA but the last couple times that I entered info into the yaml, checked valid ok, then hit restart, HA is not accessible through the server. How did you fix this. The last time, I had to reflash the card. Thanks

  • @foochuangyeh
    @foochuangyeh 3 года назад

    my duckdns address can only work when im using my home wifi...i tried it using mobile with data but cant connect...but can work with wifi...what went wrong?

    • @mostlychris
      @mostlychris  3 года назад

      Have you opened the port in your router?

    • @foochuangyeh
      @foochuangyeh 3 года назад

      @@mostlychris yes.. All set.. It was working before... Just last week it stopped working... Couldnt figure out what went wrong..

    • @mostlychris
      @mostlychris  3 года назад

      @@foochuangyeh There are a number of things that could be wrong. If you look up your duckdns address does it come back to your correct IP? How does it work on your internal wifi? I had to set up split DNS using AdGuard to point my domain to the internal IP while on my local network. Is this how you have things configured?

    • @foochuangyeh
      @foochuangyeh 3 года назад

      @@mostlychris yes all good, i even try checking using open port checker 8123 can be view on my IP.....duckdns also show my IP...couldnt really figure out what went wrong...

    • @mostlychris
      @mostlychris  3 года назад +1

      @@foochuangyeh I'm at a loss. If the ports are open and you can reach your IP, there must be a DNS issue or something on your device is being blocked when not on your home network. Have you tried a different device that uses a different type of network? Example, if you are using your phone, change to using a laptop on coffee shop wifi or something like that.

  • @jacopocec
    @jacopocec 3 года назад

    Hallo and thank you !
    After installation of DuckDNS, may I be able to reach internally like before with IP:192.168......... ?
    My browser don't let me reach HA if I do not write my duckdns domain. (internally)
    I have tried with http and https
    thank you !!

    • @mostlychris
      @mostlychris  3 года назад

      You should be able to reach internally. You might need to add https: in front of the local link. It will probably complain about certificate errors, etc., but if you are on your local network then you can accept those errors. Alternatively, you could install AdGuard and use a DNS rewrite to send your duckdns URL to your local IP address while on your local network.

    • @j.jordens4700
      @j.jordens4700 2 года назад +1

      @@mostlychris I had the same problem! Thanks Chris for this answer.

  • @RJGamer-zb4lb
    @RJGamer-zb4lb 2 года назад

    is it suppose to disable the local ip address?

    • @mostlychris
      @mostlychris  2 года назад

      No. I can connect to the local IP but I have to accept the certificate error since it doesn't match the domain the cert is for.

  • @joshuasimmons571
    @joshuasimmons571 3 года назад

    Ah now I can't connect to my home assistant 😑 followed every step do I have to reset it completely?

    • @mostlychris
      @mostlychris  3 года назад +1

      Try the local ip address with https

    • @joshuasimmons571
      @joshuasimmons571 3 года назад

      @@mostlychris ok I can login locally like that. Thanks! Just gotta figure out what I did wrong now. Lol could it be I'm using a Hotspot connected to a router and the pi4 connected to the router?

    • @mostlychris
      @mostlychris  3 года назад

      It just activated https mode. I thought I bricked mine when I first did this until I tried https. If you are running spilt DNS you could point the new domain internally to that private ip address. I use adguard for this.

  • @MG-yb4qg
    @MG-yb4qg 2 года назад

    Thanks Chris! plz teach how to connect home assistant to Tor network

    • @mostlychris
      @mostlychris  2 года назад

      Interesting concept. Let me add that to my ideas list.

    • @mostlychris
      @mostlychris  2 года назад

      Let me add that to my ideas list.

  • @MattKurkowski
    @MattKurkowski 3 года назад

    Are you on lbry/odysee?

  • @rec_39
    @rec_39 2 года назад

    awesome. lost a day, but doesnt work

    • @mostlychris
      @mostlychris  2 года назад

      That's unfortunate. What's the issue?

  • @MattKurkowski
    @MattKurkowski 3 года назад

    First

  • @steveklein9335
    @steveklein9335 2 года назад

    i got duckdns setup on their website and also installed it within HA. however, i can't find the configuration.yaml file to copy/paste this text in
    http:
    ssl_certificate: /ssl/fullchain.pem
    ssl_key: /ssl/privkey.pem
    (around 4:50 in the video)

    • @mostlychris
      @mostlychris  2 года назад

      That is the configuration.yaml file. You'll need to use the File Editor add-on, Visual Studio Code, or something like that to edit the file.

    • @steveklein9335
      @steveklein9335 2 года назад

      @@mostlychris right, but i don’t know how to find the configuration.yaml file. when i set up samba share and connect to my server, i have access to all the directories except the config directory for some unknown reason. i can’t seem to find where to edit the configuration.yaml file within homeassistant. i remember being able to do that a long time ago, but i thought they removed that?

    • @mostlychris
      @mostlychris  2 года назад

      @@steveklein9335 Do you have the file editor add-on installed? Try that instead of VSC. I don't know why the config directory wouldn't show up. I don't think it matters but you could also check to make sure you have "advanced mode" enabled in your profile settings on HA.