Bamboo

Bamboo connects your home network to a Blacktip edge over WireGuard. Websites and ports you open in Hammerhead can then reach Home Assistant, and any other device at home, without opening a port on your router. Bamboo only makes outbound connections.

Set up

In Hammerhead, open Sites, choose Add site, and copy the site's token with Show command.
Install this add-on and open its Configuration tab.
Enter the Hammerhead address (for example https://hammerhead.example.com) and the Site token, then save.
Start the add-on. The site shows as online in Hammerhead within a few seconds, and the add-on's log says WireGuard up.

Reach Home Assistant from the internet

Add a resource in Hammerhead:

What are you sharing: Website
Where does it point: this site, host 127.0.0.1, port 8123
How do people reach it: your hostname, for example home.example.com

Home Assistant refuses requests that come through a proxy unless it trusts the proxy. Bamboo connects from the same machine, so add this to configuration.yaml and restart Home Assistant:

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 127.0.0.1
    - ::1

Without it, the page fails with "400: Bad Request". Home Assistant has its own sign-in, so you can leave the resource without a login in Hammerhead, or put one in front for a second layer.

Reach other devices at home

The add-on uses host networking, so a resource can also point at any address on your network, such as a camera at 192.168.1.40. Pick this site as the target and enter that address and port.

Suggest services (optional)

Turn on Suggest services and Bamboo reports the services listening on Home Assistant's machine to Hammerhead, so you can pick one as a target instead of typing its address. Fill in Scan subnets (for example 192.168.1.0/24) and it also looks for services on those networks, trying the ports in Scan ports or a short list of common ones. It is gentle, with a rate limit and a sweep every 15 minutes, and only private networks are accepted. Nothing is exposed until you pick a target. Only scan networks you are allowed to scan.

Updates

The add-on version is the Bamboo release it installs. Update it from the add-on's page when a new version appears. Bamboo's own auto-update is not used here, because a new version arrives as an add-on update instead. Your WireGuard key and settings are kept across updates.

Troubleshooting

The log asks for configuration: the address or token is empty.
The site stays offline: check that the address opens in a browser from the same network, and that the token belongs to a site, not an edge.
Home Assistant shows "400: Bad Request": add the http: block above.

2.7 KiB Raw Blame History