Home Assistant

Your Home Assistant from outside the house, on your domain and with HTTPS, without opening router ports.

Publish it

Before: the server installed («Install the server») and the agent's machine joined («Connect your machines»). With --preset, add sets this app's port, options and checks.

The agent runs on a machine in your network that is always on: a mini PC, a Raspberry Pi or, with Home Assistant Container, the same computer. Home Assistant OS does not let you install programs, so there it goes on another machine. Point it at Home Assistant's IP and port: 8123 on Container; on Home Assistant OS, 80 since version 2026.8.

On the agent's machine

lnkstart add casa=192.168.1.50 --preset home-assistant
sudo lnkstart install

It is at https://casa.tunnels.midominio.com. The interface's WebSocket works with no setup.

Make it trust the tunnel

Home Assistant refuses what reaches it through a proxy it does not know. In Settings → System → Network, turn on trusting X-Forwarded-For and add the IP of the agent's machine as a trusted proxy (127.0.0.1 if it is the same computer). It then sees each visitor's real IP, and its IP ban after failed logins works.

If your version does not have those options under Network, they go in configuration.yaml:

configuration.yaml

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 192.168.1.20

The mobile app

In Settings → System → Network, set https://casa.tunnels.midominio.com as Home Assistant's Internet URL: the mobile app uses it when you are away.

Better without --password: the mobile app cannot fill in the form LnkStart puts in front. Home Assistant has its own login; turn on two-step verification there.