[echoangle]

The problem is that my home server isn’t reachable from the internet, so there’s nothing for the proxy to forward. I would need to set up some kind of VPN for that, right? But this functionality already exists in HA, that’s why I asked.

[baq]

Tailscale solves this, and a few other things. Amazing product with an amazing free tier for personal use. Super easy setup, too.

[orev]

VPN is the right solution here. Each app shouldn’t have to develop its own remote access method when a generic solution already exists.

It would be an issue if you’re stuck behind double NAT, but I think tailscale can help with that.

[RobMurray]

Just put tailscale [1] on all of your devices and forget about the problem. It may be technically a vpn but it's much easier to use.

[1] https://tailscale.com/

[erinnh]

You can install wireguard or tailscale from the addon store.

[ghostpepper]

Just adding another voice for tailscale. It's an awesome product with a very generous free tier.

[vladgur]

The biggest problem with Tailscale and/or WireGuard is that I can’t inform IOS to only connect to VPN when home assistant app is running or when notification comes in.

I have to run it on my phone all the time effectively routing all mobile traffic through my home VPN which is not ideal for bandwidth and battery life.

I end having to manually turn it off and on.

Instead I wish home assistant had a way to make mobile notification resources easily accessible without VPN - say behind a short lived access token so that I could quickly view the notification media without having to expose local HA install or having VPN always on

[aborsy]

Tailscale doesn’t route all your traffic by default. It routes only traffic destined to Tailscale IPs, which in your case should be near zero.

You can use an exit node. In that case it will route all your traffic to your home network.