Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

agnos.is Forums

  1. Home
  2. Selfhosted
  3. My reason for wanting HomeAssistant and a locked down VLAN...

My reason for wanting HomeAssistant and a locked down VLAN...

Scheduled Pinned Locked Moved Selfhosted
selfhosted
92 Posts 59 Posters 1 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • T [email protected]

    I've watched enough Lock Picking Lawyer never to want a consumer 'smart lock.' Half of them can be opened with a magnet. Maybe commercial grade is better, but I've been locked out of my job after every power failure for the last 10 years, until someone comes along with a physical key.

    Re homeassistant on a Pi: homeassistant does a lot of database transactions, so you may want to have db storage on something other than an SD card.

    B This user is from outside of this forum
    B This user is from outside of this forum
    [email protected]
    wrote on last edited by
    #45

    I’ve watched enough Lock Picking Lawyer never to want a consumer ‘smart lock.’

    I'm gonna differ on this. The point of a lock is to control law-abiding access to your house. If someone wants in your house, they can attack your windows, doors, or even a wall if the lock is too strong. A smart lock let's you open the door for a family member remotely, or set one time-access for your in-laws to come over and pickup a tool.

    I wouldn't use a smart lock for something hardened, like a bunker or a vault, but for a house and garage, it's okay not to have the most bullet proof lock in the world.

    1 Reply Last reply
    0
    • L [email protected]

      I just bought my first home and as soon as I'm decently unpacked I'm going to start my journey on self hosting.

      Currently planning:

      • Small i5 HP Pro SFF PC for hosting large apps (going to config for Linux and power it off until I get more mature
      • Raspberry Pi4: pihole and home assistant
      • Raspberry Pi4: NextCloud, Deck
      • ZigBee router thing:
        • Nest thermostat came with the house
        • adding light bulbs and switches
        • want a smart doorknob but the security bothers me. Schlage Connect™ Smart Deadbolt, Z-Wave Plus
      • NAS
      • Jellyfin
      • JBOD on SFF?
      • flashing old Netgear nighthawk into wwdrt
      • OS Ticket to replace NextCloud Deck for a JIRA type solution to manage projects and major house items.
      • ZigBee thermometers for better Nest accuracy
      • ZigBee motion sensors for entry ways and bathroom
      • smart plugs and motion sensors for basement TV lights

      Not sure what else to add. Open to advice or suggestions.

      K This user is from outside of this forum
      K This user is from outside of this forum
      [email protected]
      wrote on last edited by
      #46

      Great list! If you already have the Raspberry Pi devices, great. If you were going to buy some, I would look at thin clients instead. Low-power, cheaper, more powerful, can use real hard drives instead of SD cards or adapters, and x86 instead of ARM. I have an HP T630 I like but I hear good things about the Dell Wyse 5070 too.

      L 1 Reply Last reply
      1
      • K [email protected]

        Great list! If you already have the Raspberry Pi devices, great. If you were going to buy some, I would look at thin clients instead. Low-power, cheaper, more powerful, can use real hard drives instead of SD cards or adapters, and x86 instead of ARM. I have an HP T630 I like but I hear good things about the Dell Wyse 5070 too.

        L This user is from outside of this forum
        L This user is from outside of this forum
        [email protected]
        wrote on last edited by [email protected]
        #47

        I have:

        • 2x pi4 4gb (bought them previously for octopi and pihole)
        • Pi zero
        • Several old laptops
        • 2x SFF HPs
        • 2x netbooks
        • An old slim workstation

        I work as a sysadmin so I've picked up a few things that wouldve gone to recycling.

        My concern is power draw running 24/7 so I need wattage monitors and going to start with the Pi systems. Until I hit performance issues then migrate to a SFF.

        1 Reply Last reply
        0
        • L [email protected]

          cross-posted from: https://lemmy.world/post/32265822

          xkcd #3109: Dehumidifier

          xkcd #3109: Dehumidifier

          Title text:

          It's important for devices to have internet connectivity so the manufacturer can patch remote exploits.

          Transcript:

          [A store salesman, Hairy, is showing Cueball a dehumidifier, with a "SALE" label on it. Several other unidentified devices, possibly other dehumidifier models, are shown in the store as well.]

          Salesman: This dehumidifier model features built-in WiFi for remote updates.
          Cueball: Great! That will be really useful if they discover a new kind of water.

          Source: https://xkcd.com/3109/

          explainxkcd for #3109

          T This user is from outside of this forum
          T This user is from outside of this forum
          [email protected]
          wrote on last edited by
          #48

          I was an idiot and bought a high end TPLink router, I can't even use Vlans without signing up for their back door service.

          L redeyeflightcontrol@lemmy.worldR S H 4 Replies Last reply
          13
          • K [email protected]

            I just shopped for a humidifier, purposely avoided anything "smart", I ended up with a really fucking simple one, it has a hydrostat and can aim to automatically reach a level you want (40-50-60), has 4 speed,1,2,3,auto and sleep.

            And the whole thing is nothing else just a wicking filter sitting in water that has a fan pointed at it, I think Technology Connectios would be proud of my purchase.

            I will have to disinfect and change filters, but no need for distilled water like with ultrasonic humidifiers, and I boil my water and let it cool back to room temperature before adding it to the humidifier, hopefully that will help with staving off build up of bacteria

            L This user is from outside of this forum
            L This user is from outside of this forum
            [email protected]
            wrote on last edited by
            #49

            Boiling definitely helps and is a hell of a lot cheaper than constantly buying gallons of distilled

            D 1 Reply Last reply
            0
            • T [email protected]

              I was an idiot and bought a high end TPLink router, I can't even use Vlans without signing up for their back door service.

              L This user is from outside of this forum
              L This user is from outside of this forum
              [email protected]
              wrote on last edited by
              #50

              Yeah. Even my old solid netgear got a firmware update that's begging me to get the app now. Shobe that shit up your ass.

              At least give me a checkbox to stop bothering me

              S 1 Reply Last reply
              5
              • W [email protected]

                you must have lots of LoTs

                anunusualrelic@lemmy.worldA This user is from outside of this forum
                anunusualrelic@lemmy.worldA This user is from outside of this forum
                [email protected]
                wrote on last edited by
                #51

                Lord of the Trackers!

                1 Reply Last reply
                4
                • M [email protected]

                  There is more than one type of water, but unless your IoT device is a fusion reactor it's probably just running off the normal blend.

                  couldbealeotard@lemmy.worldC This user is from outside of this forum
                  couldbealeotard@lemmy.worldC This user is from outside of this forum
                  [email protected]
                  wrote on last edited by
                  #52

                  https://enron.com/pages/the-egg

                  1 Reply Last reply
                  0
                  • L [email protected]

                    cross-posted from: https://lemmy.world/post/32265822

                    xkcd #3109: Dehumidifier

                    xkcd #3109: Dehumidifier

                    Title text:

                    It's important for devices to have internet connectivity so the manufacturer can patch remote exploits.

                    Transcript:

                    [A store salesman, Hairy, is showing Cueball a dehumidifier, with a "SALE" label on it. Several other unidentified devices, possibly other dehumidifier models, are shown in the store as well.]

                    Salesman: This dehumidifier model features built-in WiFi for remote updates.
                    Cueball: Great! That will be really useful if they discover a new kind of water.

                    Source: https://xkcd.com/3109/

                    explainxkcd for #3109

                    redeyeflightcontrol@lemmy.worldR This user is from outside of this forum
                    redeyeflightcontrol@lemmy.worldR This user is from outside of this forum
                    [email protected]
                    wrote on last edited by
                    #53

                    My house has manual windows, manual locks, and a dumb garage door controller... because I work in IT.

                    I do have a few smart appliances (environment reporting) but they are only allowed on the banishment VLAN so they don't get to interact with any single appliance inside my network. All they see is internet and nothing else.

                    N 1 Reply Last reply
                    9
                    • T [email protected]

                      I was an idiot and bought a high end TPLink router, I can't even use Vlans without signing up for their back door service.

                      redeyeflightcontrol@lemmy.worldR This user is from outside of this forum
                      redeyeflightcontrol@lemmy.worldR This user is from outside of this forum
                      [email protected]
                      wrote on last edited by
                      #54

                      Shit, are consumer appliances really getting that bad? ew!

                      T 1 Reply Last reply
                      1
                      • redeyeflightcontrol@lemmy.worldR [email protected]

                        Shit, are consumer appliances really getting that bad? ew!

                        T This user is from outside of this forum
                        T This user is from outside of this forum
                        [email protected]
                        wrote on last edited by [email protected]
                        #55

                        I'd assume all Chinese devices are being backdoored via CCP incentives. Buy Asus perhaps, assuming Taiwan never gets infiltrated.

                        U 1 Reply Last reply
                        2
                        • T [email protected]

                          I was an idiot and bought a high end TPLink router, I can't even use Vlans without signing up for their back door service.

                          S This user is from outside of this forum
                          S This user is from outside of this forum
                          [email protected]
                          wrote on last edited by
                          #56

                          I was an idiot and bought a high end TPLink router, I can’t even use Vlans without signing up for their back door service.

                          Hm, at least with their enterprise equipment you can completely disable Omada.

                          1 Reply Last reply
                          0
                          • T [email protected]

                            I was an idiot and bought a high end TPLink router, I can't even use Vlans without signing up for their back door service.

                            H This user is from outside of this forum
                            H This user is from outside of this forum
                            [email protected]
                            wrote on last edited by
                            #57

                            maybe install openwrt/ddwrt?

                            1 Reply Last reply
                            7
                            • P [email protected]

                              You lost a bit of credibility when you misspelt atoms

                              S This user is from outside of this forum
                              S This user is from outside of this forum
                              [email protected]
                              wrote on last edited by
                              #58

                              That's just because I'm using a pH from Like 2008 and it has progressively stupid autocorrect.

                              Even when I correct it if I don't spacial go to the next would and then do back it will change what I said.

                              As an example I just left this how it wasn't me too.

                              1 Reply Last reply
                              0
                              • L [email protected]

                                cross-posted from: https://lemmy.world/post/32265822

                                xkcd #3109: Dehumidifier

                                xkcd #3109: Dehumidifier

                                Title text:

                                It's important for devices to have internet connectivity so the manufacturer can patch remote exploits.

                                Transcript:

                                [A store salesman, Hairy, is showing Cueball a dehumidifier, with a "SALE" label on it. Several other unidentified devices, possibly other dehumidifier models, are shown in the store as well.]

                                Salesman: This dehumidifier model features built-in WiFi for remote updates.
                                Cueball: Great! That will be really useful if they discover a new kind of water.

                                Source: https://xkcd.com/3109/

                                explainxkcd for #3109

                                I This user is from outside of this forum
                                I This user is from outside of this forum
                                [email protected]
                                wrote on last edited by
                                #59

                                Yeah, companies have abused that to release buggy, incomplete products faster and only make the software stable and feature complete if they make a good profit.

                                L 1 Reply Last reply
                                8
                                • S [email protected]

                                  And you must enter password through a 2 character wide menu screen with only up and down arrows

                                  H This user is from outside of this forum
                                  H This user is from outside of this forum
                                  [email protected]
                                  wrote on last edited by
                                  #60

                                  The up arrow moves through the letters, e.g., A->B->C. The down arrow moves to the next character in the sequence, e.g., C->CA->CAA. If you click past the correct letter, you’ll have to click all the way through again. And if you submit the wrong letter, you have to start all over (after it takes twenty seconds attempting to connect with the wrong password and then alerts you that it didn’t work, of course).

                                  S 1 Reply Last reply
                                  2
                                  • R [email protected]

                                    This has been my approach and it has gone okay so far except for 2 issues that are quite a pain:

                                    1: you have to thoroughly research what you buy. Does it work on an isolated vlan? Just because it works with home assistant does not guarantee this. Many home assistant users are comfortable with some degree of data collection and an integration does not mean that it will work local only (nor does it mean that all features will work). If it does work local only you may sacrifice some features. Cameras are a good example. Most cameras with object/person detection do this in hardware, but not all. If you circumvent the Internet connection and proprietary app you may sacrifice this, or more likely alerts

                                    2: there is 0 regulation binding a vendor to the terms of service agreed to at the point of sale, including making significant and sweeping changes. Case in point: I got a chamberlain myQ garage door opener. It worked well and opened my garage door. Integrated with home assistant via the API. However, chamberlain serves a lot of ads for upsells and services via their shitty app. They decided that users circumventing the app and not seeing that you could give amazon drivers access to your garage to deliver packages (seriously) or buy shitty cameras was unacceptable so they updated the TOS and revoked API access for all users. The only way it works now is via their app. I sold mine and built a ratgdo

                                    Another example is Philips hue: while they have been able to be used local only for over a decade Philips has decided they’re going to start a subscription security service with all the devices that entails based around the hue hub. At some point in the near future if your hub updates it will require you to sign in to a Philips account and be online. This one’s way worse as some people have thousands of dollars invested in hue. I have like $300 in the fancier white hue bulbs but some people on the HA forums and reddit literally have their house decked out with like 80-100 bulbs, many of which are the RGB. Kind of silly but they do work very well, flicker free, good color, and last ages. I still have some from like 2016 going strong. Luckily here if you have the bridge on an isolated vlan it won’t update and worst case the bulbs work with zwave zigbee but the principle of the thing is ridiculous. It should be illegal for a company to change the terms this far after the contract of sale

                                    Other examples too. Many car manufacturers (Mazda, Chevrolet, ford) because api access limited data collection for them to sell, some companies are openly hostile to home assistant and when an integration is created they will go out of their way to break it (Ariston, bambu), etc. see https://github.com/unixorn/internet-of-trash

                                    H This user is from outside of this forum
                                    H This user is from outside of this forum
                                    [email protected]
                                    wrote on last edited by
                                    #61

                                    I thought Hue bulbs used Zigbee?

                                    R 1 Reply Last reply
                                    0
                                    • I [email protected]

                                      Yeah, companies have abused that to release buggy, incomplete products faster and only make the software stable and feature complete if they make a good profit.

                                      L This user is from outside of this forum
                                      L This user is from outside of this forum
                                      [email protected]
                                      wrote on last edited by
                                      #62

                                      Or add new bloat features / brick devices after updating TOS...

                                      J 1 Reply Last reply
                                      6
                                      • L [email protected]

                                        cross-posted from: https://lemmy.world/post/32265822

                                        xkcd #3109: Dehumidifier

                                        xkcd #3109: Dehumidifier

                                        Title text:

                                        It's important for devices to have internet connectivity so the manufacturer can patch remote exploits.

                                        Transcript:

                                        [A store salesman, Hairy, is showing Cueball a dehumidifier, with a "SALE" label on it. Several other unidentified devices, possibly other dehumidifier models, are shown in the store as well.]

                                        Salesman: This dehumidifier model features built-in WiFi for remote updates.
                                        Cueball: Great! That will be really useful if they discover a new kind of water.

                                        Source: https://xkcd.com/3109/

                                        explainxkcd for #3109

                                        drunkanroot@sh.itjust.worksD This user is from outside of this forum
                                        drunkanroot@sh.itjust.worksD This user is from outside of this forum
                                        [email protected]
                                        wrote on last edited by
                                        #63

                                        i love it when my vacum makes a remote connction to a other countrye goverment that way i get tracked by mine and theres whatba time we live in

                                        1 Reply Last reply
                                        3
                                        • J [email protected]

                                          I have a rule that "Nothing will be automated that cannot be manually overridden."

                                          Well, actually it's my wife's rule but it's a good rule nonetheless.
                                          As a result, there's a big panel full of relays in the basement that is the "last mile" for anything climate control or security related.

                                          There have been a few times when it's been handy. Like when the exhaust fan isn't working and I don't want to debug the ESP32 controller today so I just flip it over to "Manual".

                                          justenoughducks@feddit.nlJ This user is from outside of this forum
                                          justenoughducks@feddit.nlJ This user is from outside of this forum
                                          [email protected]
                                          wrote on last edited by [email protected]
                                          #64

                                          KNX.

                                          Everything is decentrally programmed, and you can do extra automations and stuff from home assistant, but KNX devices are wired (generally) and will always Just Work™. More expensive that the cheaper retrofit options, but if you factor in manual overrides or getting the "better" wireless smart devices it is comparable. They generally also have a manual override at the panel. For core functions like lights, HVAC, roll shutters or blinds, etc... That is honestly the best option (unless you want every light to be an RGB light for some reason, then you still need smart bulbs)

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups