SUPER EASY! Secure Remote Home Assistant Access with Cloudflare Argo Tunnel

Yet another method to securely access Home Assistant OR any internal resources with a Cloudflare Argo Tunnel. Follow along as I create a tunnel and add a public hostname that points back to your Home Assistant instance.

Links:

Support this channel by becoming a member:

If you would like to support me:

Products I reference in my videos (contains affiliate links)

DISCLAIMER: Some of the links above take you to affiliate sites that may or may not pay a small commission to me. It doesn't increase the cost to you, but it does help support me in making these videos.

Want to send me something? Send it here!
Mostlychris
24165 IH-10 West
STE 217 Box 164
San Antonio, TX 78257

00:00 Intro
00:33 What is Cloudflare Argo Tunnel
02:20 Things you need first
03:21 Set up a tunnel
06:04 Set up public hostname
08:08 Mistakes were made
09:55 Trusted Proxies
12:11 Additional Cloudflare settings
13:27 Home Assistant URL settings
14:19 Final thoughts and wrap

#HomeAssistant
#HomeAutomation
#remoteaccess

[mrbenny]

Thanks for this video! I'm using Home Assistant Docker with nginx reverse proxy and an ssl cert for remote access, but I like the idea of using a tunnel and not needing to forward any ports. I'll give this a try!

[Birukoff]

You can make it even simpler by using Home Assistant's "cloudflared" addon that will take care of the whole configuration, including SSL, IPs, docker, connectors, etc, for you.

[MarkNguyen]

Reducing the threat vector by geography is a good tip. Thanks!

[CrynogarTM]

Chisel and self hosting is really secure and could be used over free cloudflare zero trust tunnel

[antonnemtsev]

Hi.
It looks like there are assumption that there are https terminator configured on HA?
Because I don't have anything like this in the config.yaml.
Also where did you get Cloud Flare IP?
And your HA IP that you set in public host names on cloud flare?
Would be really nice to clarify this.
Thank you for tutorial.

[jamesebody]

Thanks for this Chris - just what I wanted!

[jmr]

Nice tutorial. I've been considering Cloudflare for a while and I've been playing with their services off and on for months. I had a log in attempt from another country a couple days ago that could have been filtered out.

On another note I hear we don't have to check configuration before restarts anymore because HA will do that when we hit restart but I can't stop myself. It makes me feel better to hit it! 🤣

[manukalias]

5:15 If I run this command in ssh, my tunnel works but as soon as I quit this ssh session where the command was run, my tunnel goes down.
Can you point me to any docs where I can understand this.
I am running HA on RPi + Omv + docker + portainer.
Any help appreciated 🙏🙏

[cecastil]

Hello Chris, nice tutorial as usual! Is there a reason that you prefer not using the HA Cloudflared add-on?

[fluffden]

does this work on docker? seems like i cant reach logs or anyhthing else you pointed out in the video

[sandeepchunduru]

Thanks fot this Chris. But it is not working for me. I already have a tunnel in Docker on my NAS. Trying to use same tunnel for HA on R Pi but gives bad gateway errror. R Pi and NAS are on different subnets if that matters, is there a solution.

[TheTinkerDad]

Hi Chris,

I wonder how/if this solution is any more secure than what comes with HA Cloud. Currently I'm using HA Cloud and paying for it to support HA's development, but the more of my house I wire up with HA the more I need to be keen on security.

[mikepeterson]

How do I find the CloudFlare's trusted_proxies address to put in HA's config file?

[levvaisman]

Hi Chris. Thanks for this tutorial. Will google assistant work with Coudflare setup? Can I use Cloudflare HA Addon instead of a docker installation? Thanks.

[B-a_s-H]

Too bad that CloudFlare needs a payment method when you want to use Zero Trust. Most people don't have creditcards where I'm from.

[krdesigns]

at my current conditions, somehow CF cache all my images. So my problem arise when someone ring my door bell and instead of sending the current images. Its send my the cache images. Any idea on how to solve this problem? Furthermore CF did not allow you to stream CCTV?

[GiovanniWahome]

Hey Chris,
Would doing this with home assistant after a while violate the 2.8 TOS if I had an instance of frigate running or any other addon that serves media as part of its function?

The term non-HTML is very vague and I worry I could get banned from cloudflare.