homeassistant

20259 readers

145 users here now

Home Assistant is open source home automation that puts local control and privacy first.
Powered by a worldwide community of tinkerers and DIY enthusiasts.

Home Assistant can be self-installed on ProxMox, Raspberry Pi, or even purchased pre-installed: Home Assistant: Installation

Discussion of Home-Assistant adjacent topics is absolutely fine, within reason.
If you're not sure, DM @GreatAlbatross@feddit.uk

founded 3 years ago

MODERATORS

GreatAlbatross@feddit.uk

greatalbatross@lemmy.world

I aked a company for API access and they asked for IPs to whitelist (lemmy.world)

submitted 1 day ago by Squizzy@lemmy.world to c/homeassistant@lemmy.world

31 comments fedilink hide all child comments

How do I find out what IPs to give, my IP doesnt stay the same? The local IP is hardly the one they want, it wouldnt make sense I think.

you are viewing a single comment's thread
view the rest of the comments

[–] Big_Boss_77@fedinsfw.app 18 points 1 day ago (1 children)

Might be time, if you're serious about it, to reach out to your ISP and price a static public IP.

[–] Krusty@quokk.au 17 points 1 day ago (4 children)

Nooo.

Get a VPS with static IP and tunnel. And cloudflare.

You don't want a residential static IP. You will get (d)DoS. Your ISP will terminate you.

[–] Damage@feddit.it 13 points 1 day ago* (last edited 1 day ago) (2 children)

I've had a static IP for years, serving all kind of stuff, and had zero problems. Home assistant, Jellyfin streaming, Bittorrent and more.

[–] Krusty@quokk.au 1 points 14 hours ago

They'll scan your ip range eventually (repeatedly). Keep up with your patches.

[–] BlueEther@no.lastname.nz 5 points 1 day ago

I have to agree. Had a static ip for years

[–] talentedkiwi@sh.itjust.works 2 points 1 day ago

I'd recommend pangolin on a vps and skipping cloudflare. It makes the tunnel super simple. Just make sure to harden then VPS.

[–] Squizzy@lemmy.world 2 points 1 day ago* (last edited 1 day ago) (1 children)

I dont have the knowledge or equipment for this. It would be my goal but I am anxious about exposing my home network and need to wrap my head around my options.

YAML has me in a heap as it is so that is definitely out of range

Why would I be a target for ddos?

[–] jubilationtcornpone@sh.itjust.works 3 points 1 day ago

Having a static IP is not the same as exposing your local network to the internet. It also does not automatically make you a target for DDoS attacks.

If you don't have public facing web services, its incredibly unlikely that anyone is going to DDoS you. That would be a total waste of time and resources.

Every modem connected to the internet (WAN) has an IP address. Most of then are dynamically assigned by your ISP and can change occasionally.

Static IP's are also assigned by your ISP but are assigned to your account/modem and do not change.

If the API you're trying to connect to absolutely requires a static IP, you can ask your ISP for one. If they offer them -- some ISP's don't for residential accounts -- they'll probably charge you a small monthly fee. Mine is $10/ month.

If you get a static IP, you will need to know how to configure it in your router. Its not super complicated and can be done with a little bit of research.

If you can get the API provider to forgo the static IP requirement and you aren't self hosting any public facing services, then you don't need a static IP and it would be a waste of money more than anything.

Side note: you should definitely not expose anything on your local network to the WAN unless you absolutely know what you're doing.

[–] Big_Boss_77@fedinsfw.app 3 points 1 day ago

Not a bad idea, I was simply keeping my explanation simple.