Home Assistant WireGuard VPN Install and Setup!
HTML-код
- Опубликовано: 13 июл 2024
- The first 1000 people to use the link will get a free trial of Skillshare Premium Membership: skl.sh/everythingsmarthome06211
Setting up a VPN with WireGuard has never been easier with Home Assistant, in this video I will show you how to install and configure a WireGuard VPN with Home Assistant, and we also discuss what exactly a VPN is and what makes it different to a straight port forward and some of the advantages of using a VPN., not just with Home Assistant, but in general.
If you'd like to support me and future projects:
Patreon:
/ everythingsmarthome
Hardware to run Home Assistant:
Raspberry Pi 4: amzn.to/2Dviwyh
Raspberry Pi 4 Bundle: bit.ly/31TpS6Z
Micro SD Card: amzn.to/3lqBk2v
Micro SD to USB Adapter: amzn.to/2GcAk1P
SSD's: amzn.to/2Pyq5dw
Home Assistant Blue: bit.ly/31RZM4s
Buy Me a Coffee:
www.buymeacoffee.com/EverySma...
Written Article:
everythingsmarthome.co.uk
EVERYWHERE YOU CAN FIND ME:
Everything Smart Home Community Discord:
discord.everythingsmarthome.c...
Twitter: / everysmarthome (@EverySmartHome)
Instagram: / everythingsmarthome
Facebook: / everythingsmarthomeoff...
#homeassistant #smarthome
________________________
Some of the links above are affiliate links, where I earn a small commission if you click on the link and purchase an item. You are not obligated to do so, but it does help fund these videos in hopes of bringing value to you!
0:00 - Intro
0:34 - What is WireGuard? What is a VPN?
3:26 - SkillShare
4:31 - Advantages of using a VPN
6:08 - DuckDNS Configuration
8:05 - Installing and Configuring WireGuard
14:20 - Port Forwarding
15:12 - Installing the WireGuard Client and Testing 
Наука
![NoCap - Yacht Party [Official Music Video]](http://i.ytimg.com/vi/rm_lvDln8kE/mqdefault.jpg)
Who is setting up a VPN and what are you using it for!? Also, sorry for all the ramblings, my bad 😅
The first 1000 people to use the link will get a free trial of Skillshare Premium Membership: skl.sh/everythingsmarthome06211
Not rambling, it's good to know your background. Keep at it .
Appreciate it! 🙌
@@EverythingSmartHome interesting to listen! sometime is ajoy to talk something out topic😂, coffee break.....☕
Thank you so much! Yours is the first video that has explained this in such a way that I've actualy achieved a connection to my whole home network.
Amazing, thanks for commenting and glad it all worked!
I followed your tutorial and it worked perfectly! Thanks for this video! Gonna subscribe :D
This is great. Now I can setup wire guard on my dad's home assistant. This will allow him to access it while away from the farm and also let me connect to configure the home assistant.
Thanks so much for this. I had been struggling to set this up but was successful first time with your instructions! cheers!
Excellent - I'm happy for this topic. This was one the top things on my todo list.
Right on time!!
So easy to setup! Thank you for the great explaination.
Thanks a lot for the help!!, was quite confusing what IP address I should use, maybe some text guides like in other parts would be great, but thanks to this video I managed to create the VPN, thanks a lot!! :D great video
I changed my router and port forwarding on the new router was wrong ( I used TCP instead of UDP). And this video helped me to fix it and get access to VPN. Thank you.
It works!!! Thank you very much, great content :)
Yet another great video Lewis, thank you!
Cheers Rob!
Thank you friend. Perfect guide. Subscribed.
Great Stuff as always!
Great comment as always 😉
Thank you, it's a great VPN, works like a charm!
Great tutorial! Finally got it working :D
Nice one!
thanks, first half of the video was a bit noob but the last half was gold
Excellent, always to the point.
Thanks Peter!
Excellent explanation, 👏 👍
Thank you so much for amazing video.
You my good sir are a genius, the only part I struggled with was the port forwarding, but I got that right
Nice one, glad it worked!
Thanks man, had to subscribe, so I can learn more, and your content is awesome!
hey man! great video!! I got things mostly setup but I'm a little confused as to the forwarding... I know all routers are different, but can you help explain what should go into the boxes for: external host, internal host, external port, internal port?
Thanks. You saved my day ;)
Great video. Thank you. :-)
Very useful, thanks.
Thanks for watching!
That's fabulous ?Lewis. You've explained the rationale, you've explained how it works and you've used easier QRcode approach to get me to success. It's one helluva ride without too obvious a script. Thank you for deserving a SUBSCRIBE I hope to watch you again soon. Rgr
If I have a question is about weighing up whether WG and an openVPN are the same or equal or have pros and cons.
I always come out learning from your videos. The brief education class on a topic I love.
It makes me want to understand more about networks and port forwarding! Another great project to save for a rainy day. Keep up the good work!
Ah thanks James, that is very kind! Let me know if there is anything you want me to cover!
@@EverythingSmartHome for me personally a brief education/guide to home networking would be pretty cool. My home is getting to a stage where the network isn't really that stable just using my ISP router. What would be a good solution for networking in a home? Especially now my partner works from home. Seems I'm on a daily battle with keeping my ZigBee network alive as well as a lot of my smart WiFi devices!
Loving your videos, your first to appear for all my hopeful queries! Apologies if this has already been asked but am I correct in thinking this method alone won't work with setting up Alexa/Amazon the manual way?
Thanks, appreciate it! Yes this won't work with Alexa, you'll need to use Nabu Casa or the other method
Great video as always, would it be possible to have a device located at a remote geographic location (ESP8266 with temp sensor and relay) to connect to your home assistant at home?
Hey excelent tutorial! I just have one question. I have a HA running in a proxmox VM, but also various docker containers running in a different Ubuntu VM, how would I go about in connecting the second VM (docker containers VM) to Wireguard once I installed Wireguard add-on on the HA VM?
@EverythingSmartHome thanks for a great video.
Great video man thank you very much. One question please: how can i monitor who has connected (or using) wireguard tunnel? thanks man
This is not only really useful for accessing home assistant, but makes connecting to servers for work much more secure, thanks!
very good... thanks for the share
Thanks Jorge!
Hey Lewis. I just came across this video. Quick question, since you use Unifi (I think), why would you do this in Home Assistant and not use Unifi? Is Home Assistant more customisable or secure?
Thank you so much for another amazing video! I do have one question as I am having some difficulty reaching my HA instance externally through the vpn. I am able to go to my device's web browser and access the HA server from the URL without issue. But if I try to use that same URL as my external server URL in the HA app, I get an error even when still connected to the VPN. Simply giving the dns address just takes me to my router's login page. YIKES!
Very informative ... Wondering what would be the case where you have an WG vpn server in the cloud , can you use the WG addon to get connected to it ? ( I'm a novice in these matters).
I asked this on another video, but thought here might be better. Have you connected a Z-Wave USB (or any other method to get Z-Wave) to work on a docker instance of Home Assistance
Excelent work. One question. With Wireguard installed on Home Assistant, It will protect all the Internet traffic of my home (router)?
Thanks for the video. I'm really struggling though. I have a Unify multi-VLAN network. My Hass runs on a specific VLAN (via tagged connection with switch). If I add wireguard addon on Hass, it will create an additional subnet, which is outside of that VLAN subnet.
When I create firewall rules on the USG router that give the wireguard subnet access to my Unify VLANs, I still can't reach any node in my network.
Do I need to create a VLAN in Unify that corresponds with Wireguard subnet but has no or only relay DHCP and also tag this VLAN on the switch port towards the Hass server?
Thanks for the highly detailed instructions, it worked on the first try.
Excellent!
Great video, thanks .. However when I modify the config for Wireguard (and Yaml is accepted) and press SAVE then I can start Wireguard. BUT ... When I go back in the configuration it shows the default settings again ? Any clue as to why tis happens ?
Great guide. Question; I'm getting err_connection_refused with my pone. The port is forwarded, DNS is my router IP, and in the log it shows no errors and gives me an endpoint IP. The tunnel info in the WG app on the phone also shows data being transferred. What could be the issue? I'm running HA Supervised on an Intel NUC with Debian.
Great video, thanks. My ISP is Starlink and therefore can’t port forward. What approach would you use / recommend to access Home Assistant when away from home?
If you get your own router i believe you can do it. So youd connect to the router which would be connected to the starlink modem.
Great video, it was something I've never consider, now Im. I need a server for home. Hahhaha
I already have a wireguard server that I want to connect Home Assistant to. Are there instructions on setting up HA as the wireguard client?
I’ve been using duckdns with the HA Companion app but have found that my mobile provider (O2) blocks the duckdns domain, presumably because of some less quality sites that use duckdns. Had to do a dns lookup and change my companion app to use the direct router IP address which rather defeats the point of having DNS. Are there alternatives that work well with HA?
Thanks for the video, I’ve setup wireguard ok now. I did have it on my windows PC but it didn’t play well with the HA virtual server. Hopefully running wire guards in HA won’t have the same issues
nice video, only on problem... igot:[!] Missing WireGuard kernel module. Falling back to slow userspace implementation. and the vpn is real slow
any ideas?
This was absolutely amazing gotten to the point where i have far too many services to use port forwards as i am limited to 8 with my mesh router was looking at doing this soon but was expecting a huge headache love having it in HA as it means its also easily backed up and restored. also love the fact i can now ssh in with ease. 2 questions though 1. this will work on any network outside my own right work wifi etc? 2. is it true whilst connected my pihole(home) will block ads etc. keep up the amazing work p.s actually love the extra info its really interesting to know a bit of background
Glad I could help Mark and thanks for the comment as always! Yes any network outside your own should work unless they specifically block it
Not sure what you mean about the PiHole bit sorry?
@@EverythingSmartHome thanks for the reply. I heard that while connected like this to your home network if you have network wide ad blocking that would mean it would block ads on your mobile web browser while connected this way
Oh yes that's right I covered it in the video
@@EverythingSmartHome oh sorry i missed that part i was making dinner. thanks
All good, there was a lot of information in there 😅
Thanks for the great videos. I have HA running on a vm on a NUC. I have docker set up in the NUC for other services, eg pihole. Would it be better to set up wireguard in a seperate docker container or as a HA plug-in?
Thanks Joe! Ideally I'd prefer both of those on a dedicated router but either or is fine - HA OS uses docker containers so they are the same thing
@@EverythingSmartHome thanks for reply. I think I will set it up separately.
Thanks for your video!!! works fantastic. I have a proxmox VM's and i want to give access to one of proxmox's VM to a device from outside my network. Currently that device can access all of my LAN network using wirequard. How do i restrict to one specific lan IP (proxmox's VM)
Thanks!
Great tutorial, thanks! I've switched from using NoIP+Asus VPN to this solution and I think it's so much smoother. One question. I want to give my friend a config file to tunnel in to my network, he only has OpenVPN client. He doesn't want to get the wireguard app. Can he use the openvpn client to connect to my wireguard VPN server? What files do I need to provide to him?
Thanks for commenting and watching! No they are completely different protocols and servers as I talked about in the video so not compatible
I have a wireguard VPN already setup on a pi I was wondering if there is a way to have the HomeAssistant Mobile app use it to connect home without having all my phone trafic going home?
Do I need this if I have a Nabu Casa account? What would the benefits be? Thanks.
Hello do i have to do this to secure my home assistant if im already using cloudflare?
I would like the home assistant mobile app to automatically start wireguard so it can connect. Thoughts?
I had a lot of trouble getting wireguard setup. Watched this video a couple times. Couldn't get it working... Apparently making sure port forwarding was set to "UDP" was incredibly important.
Than you for sharing this great tutorial, and if you see it possible I am interested in the work you had to provide 900 employees VPN access. A video on that would be awesome!! Thank you again.
Thanks for watching and commenting! Perhaps one day!
Please make a video about esphome as a wireguard client. There is not much documentation about this!
So by this method is it safe when I access home assistant from a local coffee or public internet?
Another really useful video. It would be even better if it included using ones own domain and also using the HA external access Nabucasa link. I'm assuming that for own domain it's just a case off adding a username and password somewhere rather than the Duck DNS token?
Thanks! Unfortunately neither of those would fall under the "free" category 😅 those would be their own separate videos!
Hi Lewis. I am new to HA and looking to install wireguard. I have the latest version installed on a RPi4. I went to addons - add-on-store but wireguard is not there. Where can I find it now please.
Hi, I had a slight problem. I was unable to open the QR Code, still very new to Home Assistant. I would be grateful if you could help?
In my country all of the internet service providers blocked wireguard, so I can't apply things in this video but I will still watch it .
You sir, are a legend!
Great video👍🏻 the VS Code and QR code stuff was new to me. I have a windows box on a vlan and while connected through wireguard I can reach eg HA Lovelace UI of HA and other services but cannot connect to remote desktop tcp/3389. I have a unifi network and guess I have to setup internal LAN fw rules between the wireguard subnet to make it work, correct?
Eg 192.168.1.1 vlan with windows server on 192.168.1.2. HA with Wireguard server is on 192.168.2.1 network with IP 192.168.2.2. Wireguard client device connects on 192.168.3.1 network with IP address of 192.168.3.2. When connected vi wireguard I can browse to 192.168.2.2:8123 but cannot connect to 192.168.1.2 remote desktop tcp/3389.
Is a LAN in allow tcp 3389 fw rule in UDMP the only thing required?
Help. I have a different problem. There is a CGNAT inside my ISP's network, so my home gateway doesn't have a public IP address, and port-forward on my home gateway doesn't work.
I have a VM in the cloud that I have WireGuard server setup on. I have it working with Linux and Mac clients.
How do I configure WireGuide on Home Assistant OS 6.6 as a _client_ of my VM's WireGuard server?
is it possible to use a DNS created in cloudflare instead of Duckdns? I tried to change the host to cloudflare DNS but I can't connect to home equipment.
Lewis, I've chosen to not build all my services inside Home Assistant. While it simplifies setup, I feel like I'm putting un-related services into one basket. And that one basket has to be big enough to support them all. I've built my services in docker-compose and they can run on my server or in s VM. Any thoughts on combining/separating services from HA
Thanks for the tutorial
There is a lot of things I wouldn't ideally advice putting on the same OS as HA sure, this being one of them, I'd much rather this on a dedicated router. Having said that not everyone has access to the same hardware etc and so this can make it difficult tutorial wise for people. This isn't a bad option by any stretch its just not my "perfect" setup. Hope that helps
can you make a video where wireguard on home assistant (site A) is a client that connects to a wireguard server (site B) . this is a method used when site A is behind an LTE/4G internet network.
Great video, i only have a question Can you still use the Google assistant integration with the vpn?
Thanks! I'm not sure what you mean sorry?
No problem
Is it possible to set this configuration so that the hassio RPI is a "client" to another wireguard server? Thanks a lot in advance!
yes, but not with the official add on. I just got done installing and configuring an unofficial one to get it working.
Would this work on truenas? I have no idea what this "home assistant" is, is it Google?
You made some comments about how to get all traffic, or only some traffic to go through your home network. Let's say you wanted the option later! It looks easy enough to create two profiles (all-traffic, internal-only), I guess I'm wondering if it's just as easy to switch profiles on the phone side back and forth?
Another q - you said to access Home Assistant on your phone 'by IP address and seeing if the web page opens' - was this meant to exclude the Home Assistant app?
Yep simple enough!
No specific reason for that other than it's a simple test, but test with anything you want!
Great tutorial. You always look like you came from gym or running ^^
Thanks! Hahaha what do you mean? 😂
@@EverythingSmartHome Energized! Excited :)
Ah! Funny you should mention, I left for the gym after this video went live! I don't feel energised when I get home however! 😂
@@EverythingSmartHome I'm pumped after I come from gym usually or running these days :(
can i use duckdns if i am already using it to remote access home assistant?
hi, will this work with CG-NAT?
Great video! May God grant you health! It didn't work the first time, but it worked!
Nice video,
I'm guessing I don't need this if I subscribe to Nabu Casa ?
Also did you film this just after coming back from a run...😉😁
Cheers Steve! Not unless you need to access anything else that isn't home assistant!
Haha what do you mean? 😂
@@EverythingSmartHome Thanks might still look at this as i need to access my hikvision nvr i do use a NoIP dns for that but i'm guessing that's not as secure.
I just meant you sound short of breath compared to your other videos :)
I worry about my RUclips subscriptions i need them in top form ha ha
Yes VPN would be better!
Haha no definitely no running, I went to the gym after this 😅
Nice video. Is there a way to keep my mobile connected while I am away of my home router?
Here is the answer about my question ruclips.net/video/AK5E2T5tWyM/видео.html
Btw WireGuard client has the option to automatically connect when leaving WIFI.
Go to Edit connection, scroll down and enable Cellular in the "On-Demand activation" section.
It does on iOS but not Android (as far as I could see) so that's why I never mentioned it. You can use tasker on Android to do it but that's an entirely seperate video 😅
@@EverythingSmartHome thanks for the info, and the videos.
Can you explain the intergration of WireGuard with Firewalla? Also, recommend working on keeping your eyes open while speaking.
Still can't use printer from outside the network using WG.
Hopefully you can answer my questions actually my correction is I'm having Amazon alexr set up in home assistant following in your RUclips video at last of your video, you mentioned that port 8123 doesn't let it run for Alexa, and have to be change the port to 443, I try many different ways to do this but fail, it locked up itself, and I have to redo everything 😭is wireguard VPN can fix the issue due to my needs, forwarding port 443 to 8123? waiting your reply,pls help
actually I don't suppose to say port 443 to 8123 forwarding, but VPN tunnel is totally different things, I can understand, but I just wondering that is another way to achieve my needs, thank You
ESH: “I’m sure nobody is interested in that”
Me: I AM!!!! TELL ME EVERYTHING!!!
I love how he says sorry for going in depth and I’m sitting here thinking “Tell me more”
Is there a good reason to install the Wireguard add-on in Home Assistant as opposed to a dedicated Raspberry Pi? I ask because I already have my Wireguard set up on a Raspberry Pi and it seems to work fine. I'm just wondering if there is any advantage to the Home Assistant add-oin.
No, same thing :)
@@EverythingSmartHome Thx for the video! I am just wondering. I have a pi4-4 gig ram, running HA. I have a old pi 3B+ ( old HA instance) and want to set up a pi-hole, a VPN, MotionEye and maybe 1 or 2 others. Have a QNAP NAS w/ Plex server running so don't see a need tor a Pi NAS. Do you think I would a pushing the Pi4 or notice lag on HA side? Should I just use 3B+ to create a server just for internet protocol apps and redirects? I know the pi4 runs faster is all. Should I keep dedicated pi's?
I've had WireGuard downloaded on HA for a year... just haven't config'd.. haha
Cheers n Thx
I used wireguard for a year and the problem is that Alexa devices cant update i assumed this in using wireguard it couldn't work and when I uninstalled wireguard it worked and respond again
I'd like to set up a VPN for my Home Assistant so I can access it on my phone from anywhere. Can I just connect my phone to the VPN and leave it connected all the time? I don't want every internet request I make on my phone to go through my home internet connection. That would make my phone really slow. I just want the LAN traffic to go through the VPN.
Would you be able to have Google assistant integration with this method?
No unfortunately not
what do you do if the QR code doesn't get generated?
So close but so far! I can see the qrcode.png under Visual Studio Code, but it does not display. If (for example) I click on the private_key file, VSC does display the contents of that file. Tried using "Open with image preview (active)". No joy. Suggestions. Thanks!
Update: how's this for a hack? Had Samba share enabled for access to my backups; used Terminal to copy the QR code to the backups folder, used Windows to display the code.
"the way most people have heard about a vpn, is from..." "but first a quick message of our video sponsor this week..."
Guess this is a good way to connect to home assistant also?
Would this allow my phone to connect to homekit devices when not on wifi?
Should do with the right setup! Haven't tested it as I don't use homekit but no reason it shouldn't
Firstly, thanks for the video - I've been kicking around ddns and vpn for a few months and haven't been able to get it all working. This is looking more promising. However, when I add the ssl folder in visual studio it doesn't give me a QR code. And if I exit VS the ssl folder is gone when I go back in.
Any help appreciated.
Thanks! Hmm, it should have generated a QR code if everything was working, did the add-on startup OK?
It will be gone when you exit VSCode unfortunately that is normal unless you add it as a permenent folder in the settings.
Jump in the discord if you need help!
@@EverythingSmartHome Thanks for the super fast response!
The add-on is running correctly. When I add the ssl folder it finds WireGuard and my mobile client name I added in the config but when I go to the QR code line I just get a blank page. I do get a warning in VS all the time about not being on a secure server (http instead of https I think?) - could this be the problem? "code-server is being accessed over an insecure domain. Web views, the clipboard, and other functionality will not work as expected."
Yes that's the issue, they won't load over insecure connections, you could try the samba add-on
@@EverythingSmartHome Not sure what I was meant to do with Samba but I actually managed to just manually configure the vpn client on my phone and it's all working - so thank you!
One question though, how can I (can I?) access my actual pc from the vpn? As in, all of my drives / folders on two different pc's. What about the software on the pc's? I can log into my HA via its IP and I can log into my Blue Iris web server but so far that's all.
KISS, why not just use the default VPN subnet of 172.27.66.x/24? I would image your detailed verbal explanation of subnetting was a bit confusing for "newbs" and as you mentioned, for the experienced neteng, not needed. Again, really "why not just use the default subnet proposed"? Not a grip, I really enjoy and appreciate your vid's and the time and effort you put into them!
I understand what your saying, in but IMO it's easier and simpler for someone to understand and also remember their subnet if it's directly next to their existing network. 172.27.66 isn't really a common subnet that you'll see in a home setting and probably not easily remembered
Wireguard not available to install on HA. What would be the problem ?I updated Upto date HA hassio. Is anyone know the reason please comment.
Hi mate, just gave this a go, all seemed to work fine but when i try to connect using my mobile phone i get the following error {error bringing up tunnel: bad address} any idea what the issue might be?
I did forward the port as well,
name:
protocol: UDP
WAN port: 51820
LAN port: 51820
Destination IP: home assistant IP
Hello, hop in the discord I'm sure we can sort you out!
I am very confused to understand between the allowed_ips and the client_allowed_ips.
Hi, I don't know if you can help me.... Ive done all the steps till VSCode (I couldn't find it to install) so I installed Virtual Studio Server. I've created wireguard folder but can't view PNG file. Its just blank. Could someone assist please? Cheers
Only thing I can see is msg: code-server is being accessed in an insecure context. Web views, the clipboard, and other functionality may not work as expected.
Hi Lewis, great video again, as usual 🤩 But! Why do you set up Wireguard when you have L2TP VPN server built-in to the Unify which you use? I’ve just set that up and it’s amazing. Also when I reboot my host pc or home assistant VM I don’t loose VPN connection and I can monitor it remotely…
Thanks Pavol!
To be clear, I don't use wireguard personally, although I might switch. But to answer the question, L2TP isn't secure and I would avoid it where possible, I also don't use Unifi security gateway (USG) or UDM - I'm not a fan of either of those products, they are far too limiting to be considered a real firewall for me.
And yes so can I because I use VPN on my firewall/router which is a more ideal location for it, however not everyone has access to the same equipment or hardware so for them it's easier to run on HA. But to be clear, I do prefer to run it on a router rather than on HA. Hope that helps!
@@EverythingSmartHome Thanks Lewis. Understood 😊
very nice tutorial - as usual 👍🏼 appreciate your work very much. Please go ahead like that. 💪🏻💪🏻
You might want to check project Alice out, if you did not yet. It is a nice project for local hosted voice assistance… cheers