In the video, I mentioned that you could use Nabu Casa as the endpoint for the VPN configuration. This is not correct and I apologize for the confusion. You need to use a publicly routeable domain name that can reach your local network.

@jj2me

3 жыл бұрын

Great video(s) Chris, very informative. If I understand this correctly, you would need a static IP from your ISP?

@mostlychris

3 жыл бұрын

@@jj2me You don't need a static. You can use duckdns.org with a dynamic IP and duckdns will update your DNS if your IP changes.

@jj2me

3 жыл бұрын

@@mostlychris sounds great! Thanks Chris!

@mostlychris

3 жыл бұрын

@@jj2me yw

Great video as always Chris!

@mostlychris

3 жыл бұрын

Thanks!

Thank you - just what i needed :-)

@mostlychris

3 жыл бұрын

Glad it helped!

Worked great! I was up and running in 10 minutes (already had my Dynamic Dns setup). No more OpenVPN in the router that kept failing.

@mostlychris

2 жыл бұрын

Great to hear!

Sorry Chris. Just got this to work. Thanks Allan

@mostlychris

2 жыл бұрын

Sure thing.

Very good job Chris. Thank you. One question: what if i am connected on LTE and have enabled the hotspot future in my phone... What about other systems connected on hotspot. Do they connected via wireguard? so all are using vpn tunnel? Thank you

Hi, great video! Wonder if you would do a video turning on/off POE power for Unifi, say the VPN device is on one of the Unifi Poe ports, not part of the home assistant? You may power off the VPN completely when at home and turn it on when away. Thanks.

@mostlychris

2 жыл бұрын

Raymond. I'll add to my list of video ideas.

Great guide. However, I'm getting err_connection_refused with my pone. The port is forwarded, DNS is my router IP, and in the log it shows no errors and gives me an endpoint IP. The tunnel info in the WG app on the phone also shows data being transferred. What could be the issue? I'm running HA Supervised on an Intel NUC with Debian.

Hi! great video, I'm using Wireguard on a mini router called GL inet which acts as a VPN server. I'm able to connect VPN clients to my VPN server remotely but I'm having trouble accessing other devices directly connected to the VPN router/server' s LAN. How can I access (or even ping) a locally connected device (connected to a VPN router (server)) from a remote wireGuard VPN client? I'm guessing I'd have to create some sort of firewall policies to allow traffic?

@mostlychris

2 жыл бұрын

This should work (as far as I can tell from your description). Are your subnets in each location different so you don't have overlapping networks?

Hi, I'm able to connect into the home network and I'm also able to access home devices. What I can't do is to make my WireGuard client IP discoverable in the home network (I can see my others device in the router, but I can't see the Wireguard Client IP). Do you know how to do that? Thanks

How do I get the QR code?

Is it possible to configure WireGuard addon to allow remote clients to access other devices on internal LAN?

@mostlychris

2 жыл бұрын

Yes. I do that now. In fact, it is defaulted that way.

@mostlychris: Just one request. Can you make it happen that the music in the intro is not that loud? I use earphones from my phone and your voice comes across at a normal volume. As soon as the music starts, the volume jumps to a sky high level which at least I cannot cope with. Maybe other users have a similar experience. I would really appreciate a change. Thank you!

@mostlychris

3 жыл бұрын

Thanks for the feedback. I'll do a better job of normalizing the audio level on that intro music.

Thanks for the video I need one help to create one dummy binary sensor for 🆘 button. I’m using Alarmo in home assistant, In My dashboard I’m going to have one button card to it trigger the alarm 🚨 manually, but Alarmo will accept only binary sensor to do that. With no choice. Looking to make one dummy binary sensor. Which will give on or off based on input boolean.

@mostlychris

3 жыл бұрын

Have you looked at the helpers under configuration? That might be what you are looking for.

@jagadeeshv2763

3 жыл бұрын

​ @mostlychris yes sir but over there i think we cont make the bineary sensor

@mostlychris

3 жыл бұрын

@@jagadeeshv2763 In that case, I would create a script to set the value of the binary sensor and then call that script with a button.

Is this safer than opening ports 80/443 to access HA remotely?

@mostlychris

3 жыл бұрын

This is more for accessing devices inside your local network and not HA itself although you can. I wouldn't ever use port 80 as that assumes a non SSL connection. Regarding security, it is an end to end encrypted tunnel between your device and your local network.

Hi Chris. I have set this up with the default 172.27... addresses and I can't get it to work. My HA address is 192.168.0.16:8123 this is a static address. I have Pihole on a Raspi zero 2W 0n 192.168.0.12 which is also handling my DHCP. My router gateway is 192.168.0.1 I have forwarded port 192.168.0.16 on my router to 51820 UDP. Can you tell me what server and peer addresses should I put in the wireguard config? Thanks.

@mostlychris

2 жыл бұрын

Your other comment says you got it working. Glad for that. Thanks for the update!

Wireguard is not available on my HA hassio. I updated HA. Any solution?

@mostlychris

2 жыл бұрын

What type of install are you running?

Will I be able to access other things on my network?

@mostlychris

3 жыл бұрын

Yes, as long as they are reachable from the same network your HA server is on.

👍👍👍👍👍👍👍👍👍👍

@mostlychris

3 жыл бұрын

👍

Is there an alternative to get access to HA without port forwarding?

@mostlychris

3 жыл бұрын

Yes. You can use Nabu Casa. That is the Home Assistant cloud service. Take a look at www.nabucasa.com/.

@obl620

3 жыл бұрын

@@mostlychris Yes I've read about it, thanks. There is no free alternative i guess? 😔 (My network setup is a bit complicated with double NAT and DS Lite)...

@mostlychris

3 жыл бұрын

@@obl620 Ouch. Yeah that'll make things not work so well. You could go the route of setting up a publicaly accessible server and then make a connection between HA and that server. Then your VPN would be to the public server. It would probably cost more than using Nabu in that case as Nabu is only $5/mon US.

@obl620

3 жыл бұрын

@@mostlychris Thanks!

@mostlychris

3 жыл бұрын

@@obl620 Sure thing. Hope you get a working solution.

Does it work behind CGNAT??

@mostlychris

3 жыл бұрын

As far as I know, it will not work. CGNAT is evil. There are workarounds which involve a lot of work. Most include running a dedicated server on the internet and then bridging the home network to the public server and connecting to the public server using a VPN setup.

@yousaf.saleem

3 жыл бұрын

@@mostlychris the solution I am using is Zero-tier. Please make a video on it too

@mostlychris

3 жыл бұрын

Awesome. That is a great solution. I'll put that in my list.

It's working but i'll never get into my home network from outside. Website unavailable check your network

@mostlychris

3 жыл бұрын

Can you be more specific? Are you using a publicly routable domain that points back to your network?

@dickvanwoudenberg2919

3 жыл бұрын

@@mostlychris Yes i have a duckdns domain that i use for this project.

@mostlychris

3 жыл бұрын

@@dickvanwoudenberg2919 Did you port forward the correct port to your HA instance?

@dickvanwoudenberg2919

3 жыл бұрын

@@mostlychris Yes i have. UDP with portnumber 51820 (external and internal) to my HA server ip

@mostlychris

3 жыл бұрын

@@dickvanwoudenberg2919 What are you going to that gives you that error? An internal site on your network? Does the VPN connect at all (check your logs).