Secure Remote Access

Secure Remote Access Overview

Details of exposing smart home instances safely outside the firewall. Focuses on Nginx Proxy Manager (10.9.9.147) running wildcard Let's Encrypt certificates and enforcing strictly bound IP access lists for Proxmox and Frigate administration panels.

Authentication & ACL Rules

Access is secured through a layered authentication model:

• Home Assistant: Direct access over SSL with built-in multi-factor authentication (MFA).
• Frigate & Proxmox Host: Bound to internal network and restricted by NPM Access Control Lists (ACLs) checking source subnet matching 10.9.9.0/24. Only VPN/Local network addresses can access these control panels.