Great video! As a tip for those looking for a Dynamic DNS, how about Hurricane Electric DNS. It's free and they'll host the records for up to 50 domains with unlimited A/AAAA/MX/etc records in each one with support for updating the IP via https requests which are easy to automate with curl in a script for example.
Stumbled across your channel, and it's really good! You mention that if we'd like a video regarding DMZ setup, we should leave a comment...well, I'd like that, so please do, and keep up the good job!
I would recommend doing a video on both Zerotier and Tailscale as alternatives for remote access. Both have free services and work on any computer/phone/os for which there is client available. Can be setup in 5 minutes minimum and with little fussing about with other services. As for DDNS I recently upgraded my router to a Smarthub 2 for £36 on Ebay because it now includes DNS-O-Matic as an a DDNS entry. This service is free and its client can one time only update many other DDNS services that follow the OpenDNS protocol and all at the same time, I principally use this for Wake-on-Lan.
Thanks for the suggestion. I did consider those as options here, but decided to go with one that didn't rely on a client to be installed. You can look at it as a benefit (an extra hurdle to someone trying to break in) but it's also a barrier to some use cases (like me checking openHAB from work). I might make a video on them anyway, although not specifically for openHAB. There are other use cases like hybrid cloud that might be intersting contexts for exploring the two of them.
@@ProTechShow Thank you for your prompt reply. I will be interested in seeing such a video. I understand the clientless approach especially in a locked down enterprise environment or where you do not have your own computer on your person and only have access to an internet cafe or similar access somewhere in the world. The Zerotier or Tailscale can be a simpler approach for newbies if they want to setup a network of computers belonging to family or friends for the purposes of backup and restore policies regarding offsite storages or maybe games. Make 3 copies of your data, 2 on different formats and 1 offsite minimum. I have had situations where people have had to restart their lives from the clothes they stand up in all because they lost their computers and data when their house burnt down or they are denied access to their houses for some reason. Keep up the good work.
@@robinslack317 I completely agree about the backups. I've seen businesses going under because they cheaped out on their backups. It's not worth the risk.
I’m interested in the full implementation of a recommended remote openhab setup. Even if this in parts. I’ll look and see if you have some of this already. But I thought a comment might be nice to leave anyway. Thanks for this material.
Hi. Your project sounds great, but maybe due my lack of knowledge, I have a doubt. I want my Raspberry with OpenHAbian to be plugged to the router and working all the time, but looking at your video I see that if I install Kemp VLM on a virtual machine on my PC, I would have to have my PC running all the time for it to work, isnt it. It would make sense to have the Balancer on the raspberry where Openhabian is and that would be the only "perpetually live computer" sort of speak, but after some looking around, I have not seen how I can have them both on a same gadget. Could you shed some light on the case? Thanks
I don't think KEMP's going to be supported on a Raspberry Pi. KEMP's designed for datacentre use, not really for Pis. My setup is based on having a typical x86 hypervisor or physical devices. If you want to run it all on a Pi you could probably do something with Nginx and an additional authentication module, but it's not going to be as turnkey a solution.
Excellent tutorial - even a newby like me could follow. Can you elaborate on why you don't see the VPN as viable option? You mentioned quickly old VPN technologies as vulnerable but how about say Wireguard running on openwrt? Isn't that the gold standard with public key cryptography? It can be tricky to set up but so is this solution. I could see how the myopenhab cloud works better with your solution but is that it? Am I missing something?
Thanks. There’s nothing wrong with a VPN if it’s using strong encryption and strong authentication, so if it meets you needs and it's done correctly it is a viable option. There's a common misconception I wanted to get ahead of that VPNs are automatically more secure; because if you've got a poorly secured VPN (e.g. no MFA) then it's a bigger risk and usually exposes your entire network rather than just openHAB. Some reasons I might choose the soluton in this video over a VPN: 1. It works on any device without installing client software. 2. You can choose to expose specific API endpoints to third party services, with preauthentication. This can be handy for integrating extenal services with openHAB. 3. It can be extended to add better security to myopenHAB, which I cover in this video: ua-cam.com/video/5w7RjDJSkrI/v-deo.html
Excellent video! What do I need to do in order to get an IP address for the Kemp Loadmaster which is on my local network 192.168.x.x. ? Currently the IP address for the Kemp Loadmaster is 172.19.x.x.
More Open HAB tutorials please. - Home Assistant is dying project. Please stay apolitical and open oabout security. HA developers banning people on the forum when they suggesting security issues.
Where would you recommend for a free domain? I have a paid domain, but I wanted to include an option for those who don't and I've heard a lot of recommendations for Freenom. There is likely an element of getting what you pay for, but if you know of a better one please post it for others to use.
Great video! As a tip for those looking for a Dynamic DNS, how about Hurricane Electric DNS. It's free and they'll host the records for up to 50 domains with unlimited A/AAAA/MX/etc records in each one with support for updating the IP via https requests which are easy to automate with curl in a script for example.
Thanks for the suggestion!
Stumbled across your channel, and it's really good! You mention that if we'd like a video regarding DMZ setup, we should leave a comment...well, I'd like that, so please do, and keep up the good job!
Thanks 🙂
Really like your content. Yes would like so see a video about Cloudflare Access (and ngrok)
Thanks. 🙂
I would recommend doing a video on both Zerotier and Tailscale as alternatives for remote access. Both have free services and work on any computer/phone/os for which there is client available. Can be setup in 5 minutes minimum and with little fussing about with other services. As for DDNS I recently upgraded my router to a Smarthub 2 for £36 on Ebay because it now includes DNS-O-Matic as an a DDNS entry. This service is free and its client can one time only update many other DDNS services that follow the OpenDNS protocol and all at the same time, I principally use this for Wake-on-Lan.
Thanks for the suggestion. I did consider those as options here, but decided to go with one that didn't rely on a client to be installed. You can look at it as a benefit (an extra hurdle to someone trying to break in) but it's also a barrier to some use cases (like me checking openHAB from work).
I might make a video on them anyway, although not specifically for openHAB. There are other use cases like hybrid cloud that might be intersting contexts for exploring the two of them.
@@ProTechShow Thank you for your prompt reply. I will be interested in seeing such a video. I understand the clientless approach especially in a locked down enterprise environment or where you do not have your own computer on your person and only have access to an internet cafe or similar access somewhere in the world. The Zerotier or Tailscale can be a simpler approach for newbies if they want to setup a network of computers belonging to family or friends for the purposes of backup and restore policies regarding offsite storages or maybe games. Make 3 copies of your data, 2 on different formats and 1 offsite minimum. I have had situations where people have had to restart their lives from the clothes they stand up in all because they lost their computers and data when their house burnt down or they are denied access to their houses for some reason. Keep up the good work.
@@robinslack317 I completely agree about the backups. I've seen businesses going under because they cheaped out on their backups. It's not worth the risk.
Excellent video. Would love to see a video on proper password handling for passwords not stored in clear text using salt and hash values.
Cheers! I'll make a note of it.
I’m interested in the full implementation of a recommended remote openhab setup. Even if this in parts. I’ll look and see if you have some of this already. But I thought a comment might be nice to leave anyway.
Thanks for this material.
Always nice when people leave comments 🙂
My openHAB videos are all in this playlist: ua-cam.com/play/PLETyWSr5s6PW39MReLGlr0ygTk8CTtnBI.html
Hi. Your project sounds great, but maybe due my lack of knowledge, I have a doubt. I want my Raspberry with OpenHAbian to be plugged to the router and working all the time, but looking at your video I see that if I install Kemp VLM on a virtual machine on my PC, I would have to have my PC running all the time for it to work, isnt it. It would make sense to have the Balancer on the raspberry where Openhabian is and that would be the only "perpetually live computer" sort of speak, but after some looking around, I have not seen how I can have them both on a same gadget.
Could you shed some light on the case? Thanks
I don't think KEMP's going to be supported on a Raspberry Pi. KEMP's designed for datacentre use, not really for Pis. My setup is based on having a typical x86 hypervisor or physical devices.
If you want to run it all on a Pi you could probably do something with Nginx and an additional authentication module, but it's not going to be as turnkey a solution.
@@ProTechShow understood. thank you!
Excellent tutorial - even a newby like me could follow. Can you elaborate on why you don't see the VPN as viable option? You mentioned quickly old VPN technologies as vulnerable but how about say Wireguard running on openwrt? Isn't that the gold standard with public key cryptography? It can be tricky to set up but so is this solution. I could see how the myopenhab cloud works better with your solution but is that it? Am I missing something?
Thanks. There’s nothing wrong with a VPN if it’s using strong encryption and strong authentication, so if it meets you needs and it's done correctly it is a viable option.
There's a common misconception I wanted to get ahead of that VPNs are automatically more secure; because if you've got a poorly secured VPN (e.g. no MFA) then it's a bigger risk and usually exposes your entire network rather than just openHAB.
Some reasons I might choose the soluton in this video over a VPN:
1. It works on any device without installing client software.
2. You can choose to expose specific API endpoints to third party services, with preauthentication. This can be handy for integrating extenal services with openHAB.
3. It can be extended to add better security to myopenHAB, which I cover in this video: ua-cam.com/video/5w7RjDJSkrI/v-deo.html
Excellent video! What do I need to do in order to get an IP address for the Kemp Loadmaster which is on my local network 192.168.x.x. ? Currently the IP address for the Kemp Loadmaster is 172.19.x.x.
You should be able to change it at the local console command line - it's shown around the 11:35 mark
More Open HAB tutorials please. - Home Assistant is dying project. Please stay apolitical and open oabout security. HA developers banning people on the forum when they suggesting security issues.
I will get around to the one about securing myopenHAB. It's two or three down the list at the moment but I will get there!
Here we go: ua-cam.com/video/5w7RjDJSkrI/v-deo.html
Truly excellent content - thank you for going the extra mile beyond the typical YT fare.
Thanks!
I never recommend freenom. Website issues, zero support, and awful reviews. I wouldn't even use it for a disposable website.
Where would you recommend for a free domain?
I have a paid domain, but I wanted to include an option for those who don't and I've heard a lot of recommendations for Freenom. There is likely an element of getting what you pay for, but if you know of a better one please post it for others to use.