<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>Home-Assistant on Damien Dye&#39;s Blog</title>
    <link>https://blogs.damiendye.uk/en/tags/home-assistant/</link>
    <description>Recent content in Home-Assistant on Damien Dye&#39;s Blog</description>
    <generator>Hugo</generator>
    <language>en-GB</language>
    <lastBuildDate>Fri, 09 Oct 2026 18:00:00 +0100</lastBuildDate>
    <atom:link href="https://blogs.damiendye.uk/en/tags/home-assistant/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>The Home Assistant App Locked To A Certificate, With nginx Or Caddy And No Cloudflare</title>
      <link>https://blogs.damiendye.uk/en/homeassistant/home-assistant-app-mtls-nginx-caddy/</link>
      <pubDate>Fri, 09 Oct 2026 18:00:00 +0100</pubDate>
      <guid>https://blogs.damiendye.uk/en/homeassistant/home-assistant-app-mtls-nginx-caddy/</guid>
      <description>Locking the Home Assistant app to a client certificate with nginx or Caddy at home instead of Cloudflare. What changes when Cloudflare leaves, both configs tested over IPv4 and IPv6, why nginx can check revocation and Caddy cannot, the Home Assistant proxy settings, and what to install on the phone.</description>
    </item>
    <item>
      <title>The Home Assistant App Over Cloudflare, Locked To A Certificate, On The Free Plan</title>
      <link>https://blogs.damiendye.uk/en/homeassistant/home-assistant-app-over-cloudflare-mtls/</link>
      <pubDate>Fri, 09 Oct 2026 16:30:00 +0100</pubDate>
      <guid>https://blogs.damiendye.uk/en/homeassistant/home-assistant-app-over-cloudflare-mtls/</guid>
      <description>Reaching Home Assistant from the Android app away from home without putting a login page on the internet. The options compared on cost, risk and battery, why Cloudflare Access does not suit the app, the free-plan client certificates and WAF rule that do, the Home Assistant proxy, ban and URL settings, and building the PKCS12 file the phone needs.</description>
    </item>
  </channel>
</rss>
