homeassistant remote access using cloudflare zero-trust

homeassistant-remote-access-using-cloudflare-zero-trust.md

Cloudflare tunnel

• Create a tunnel [ref] and install client on homeassistant machine (use cloudflare addon if using HAOS)
• Create two public hostnames for this tunnel targeting http:localhost:8123
  • my-app for browser access
  • my-app-android for android companion app access
• Update homeassistant to allow proxied connections:

  # authorize cloudflare cidr
  http:
    use_x_forwarded_for: true
    trusted_proxies:
      - 172.30.33.0/24
      - 127.0.0.1
      - ::1

Cloudflare oauth2 proxy for browser access

• Create a self hosted application [ref]

Cloudflare mTLS configuration for android access

• [ref]
• mtls rule: (not cf.tls_client_auth.cert_verified and http.host eq "my-app-android")