RIP Fibaro

[Syrzyk 4]

Just installed Home Assistant and started to migrate my z-wave devices to new system. Much, much faster, a little bit scary at first, but with so much bigger potential. Wanted to say thanks to everyone who helped me understand LUA and overcome hiccups of Fibaro system. Really appreciated. Peace.

[Fabir 51]

@SyrzykOK, one can unterstand that. I've used HA, some years on a raspberry pi with an sd card. After some month, sd card after sd card, got unusable because of many read/write actions from all the sensors and stuff. 

 

Make sure, you have a quick linux maschine or a raspberry pi with ssd drive for HA.

 

 

[RH_Dreambox 175]

Quote

Make sure, you have a quick linux maschine or a raspberry pi with ssd drive for HA.

Or an old HC2

[Neo Andersson 99]

Am I mistaken, but i thinkk HA is free only for local usage, isn't it?

The remote access is for some fee...

[SmartHomeEddy 789]

4 minutes ago, Neo Andersson said:

The remote access is for some fee...

Indeed, 75 euro for a year (or 7.50 euro a month)

[Fabir 51]

Iv'e had used home assistant with the smartphone APP going trough a VPN. This is still possible, than it's free of charge.

[Sjekke 84]

1 hour ago, Fabir said:

Iv'e had used home assistant with the smartphone APP going trough a VPN. This is still possible, than it's free of charge.

That’s how I access my HC3 … 

[Fabir 51]

@SjekkeInteresting, I've never tried that with Fibaro. Is there anything not working on the yubii app trough your VPN vs trough the Fibaro ID?

[Sjekke 84]

Hi @Fabir 

 

Through my VPN it's like I'm just on the network at home.  So everything works 100% the same.

Cheers.

[Fabir 51]

@SjekkeThank you

[Louis 0]

Which vpn should we go with?

[Sjekke 84]

I’m running my own VPN server on my router (you can use IPSEC, OPENVPN, Wireguard, …. 

Edited March 23 by Sjekke

[ppeterr 201]

HA tailscale integration.

[Joep 156]

I use WireGuard, but it can be a pain to setup from scratch. It's fast and secure and works on my Phone.

[Sjekke 84]

14 hours ago, Joep said:

I use WireGuard, but it can be a pain to setup from scratch. It's fast and secure and works on my Phone.

 
I agree. If you can use WireGuard, just do it. Not only is it consistently faster than other protocols, it’s less CPU-intensive and handles encryption better than IKEv2

[Fabir 51]

@SjekkeHi, I've tried with my android handy to make a vpn connection to my fibaro hc3, no luk so far.

 

I know needed is a

DynDNS service 

open a port on the internet router

port forwarding from this port in the LAN to the fibaro homecenter

 

Which vpn protokoll do you use on the handy if you have an android handy?

I have

IKEv2/IPsec MSCHAPv2,

IKEv2/IPSec PSK,

IKEv2/IPsec RSA

on the samsung handy.

 

which port do you use to connect to the homecenter in the LAN?

[petergebruers 1,259]

On 3/23/2023 at 8:35 AM, Joep said:

I use WireGuard, but it can be a pain to setup from scratch.

From scratch, none of the more recent protocols are easy to setup due to the amount of options and evolution of things like "ciphers" and "(CG) NAT" and IPV6 and so on. However, ff you are on a Raspberry Pi, use this to get results in about 5 minutes without reading 500 pages of jargon:

 

Please login or register to see this link.

 

I quote:

 

PiVPN is a set of shell scripts developed to easily turn your Raspberry Pi™ into a VPN server using two free, open-source protocols:

- Wireguard
- OpenVPN

 

PiVPN should be, bar none, the simplest and fastest way to Install and set up an extremely secure OpenVPN or Wireguard server on your raspberry pi. You won't need a guide or tutorial as PiVPN will do it all for you in a fraction of the time with hardened security settings in place by default.

 

I used it with OpenVPN but later switched to Wireguard.

 

I value my time at 20 EUR / hour, so fighting 10 hours with "manual setup" can buy me about three Rpi 4 ...

Edited April 5 by petergebruers

[petergebruers 1,259]

For sake of completeness, since the OP mentioned Home Assistant, if you are running Homa Assistant OS there is an add on to do the Wireguard configuration for you

 

Please login or register to see this link.

 

Search for the “WireGuard” add-on in the add-on store and install it.
Set the host configuration option to your (external) address, e.g., myhome.duckdns.org.
Change the name of the peer to something useful, e.g., myphone.
Save the configuration.
Start the “WireGuard” add-on
Check the logs of the “WireGuard” add-on to see if everything went well.
Forward port 51820 (UDP!) in your router to your Hass.io 963 IP.
Download/Open the file /ssl/wireguard/myphone/qrcode.png stored on your Hass.io 963 machine, e.g., using Samba, Visual Studio Code or the Configurator add-on.
Install the WireGuard app on your phone.
Add a new WireGuard connection to your phone, by scanning the QR code.
Connect!

 

Unless you have a business IP connection you probably have a dynamic address hence all these setups will refer to something akin to "duckdns"

 

That said, I do think the solution offered by Fibaro (which requires no configuration but does use Fibaro public servers) is by far the easiest. Or the (non-free) "Nabu Casa" solution. There surely are reasons to use a VPN but "ease of use" is not one of them, imho.

[ppeterr 201]

Well.....i will say it again

 

Tailscale addon...zero config, ZERO PORTFORWARDING

 

 

 

[Joep 156]

This is reversed tunneling, exactly what the HC3 and Yubii app does when remote. 😇

Edited April 5 by Joep
Add more context