fix(heimdallr): LAN-direct bindings + angie proxy headers #15

Merged

litelotus merged 1 commit from feat/heimdallr-lan-direct into main 2026-09-04 21:13:20 +00:00

Conversation 0 Commits 1 Files changed 2 +11 -5

litelotus commented 2026-09-04 21:13:16 +00:00

Owner

Copy link

Root cause of the connection struggle: ha.litelot.us resolves to the public proxy IP (88.98.245.78) — not heimdallr — so the browser hits the internet proxy (502), never heimdallr's angie. The 'bans' in HA were the browser retrying /api/websocket through a proxy with no HA upstream.

Changes (LAN-direct access while the public proxy is wired up later):

• HA http.server_host: 127.0.0.1 → 0.0.0.0 → reachable at http://192.168.1.125:8123
• OTBR web.listenAddress: → 0.0.0.0 → reachable at :8082; REST stays loopback (HA-only)
• MA already binds 0.0.0.0:8095 by default
• angie recommendedProxySettings = true: X-Forwarded-For/Proto/Host so HA sees real client IPs, not angie's loopback
• firewall: open 8123/8095/8082

Dry-build passes.

**Root cause of the connection struggle:** `ha.litelot.us` resolves to the public proxy IP (88.98.245.78) — not heimdallr — so the browser hits the internet proxy (502), never heimdallr's angie. The 'bans' in HA were the browser retrying `/api/websocket` through a proxy with no HA upstream. Changes (LAN-direct access while the public proxy is wired up later): - HA `http.server_host`: 127.0.0.1 → 0.0.0.0 → reachable at http://192.168.1.125:8123 - OTBR `web.listenAddress`: → 0.0.0.0 → reachable at :8082; REST stays loopback (HA-only) - MA already binds 0.0.0.0:8095 by default - angie `recommendedProxySettings = true`: X-Forwarded-For/Proto/Host so HA sees real client IPs, not angie's loopback - firewall: open 8123/8095/8082 Dry-build passes.

litelotus added 1 commit 2026-09-04 21:13:16 +00:00

fix(heimdallr): bind HA/MA/OTBR-web to 0.0.0.0 + fix angie proxy headers ... 34d1c7f158

Root cause of the connection struggle: ha.litelot.us resolves to the
public proxy IP (88.98.245.78), not heimdallr — so browsing there hits
the internet proxy (502), never heimdallr's angie. HA's 'bans' were the
browser retrying /api/websocket against a proxy with no HA upstream.

Changes for LAN-direct access while the public proxy is wired later:
- HA http.server_host 127.0.0.1 -> 0.0.0.0 (LAN: http://192.168.1.125:8123)
- OTBR web.listenAddress 127.0.0.1 -> 0.0.0.0 (LAN: :8082); REST stays loopback
- MA already binds 0.0.0.0:8095 by default
- angie recommendedProxySettings = true (X-Forwarded-For etc.) so HA sees
  real client IPs instead of angie's loopback
- firewall: open 8123/8095/8082

litelotus merged commit 85169fae8e into main 2026-09-04 21:13:20 +00:00

litelotus referenced this pull request from a commit 2026-09-04 21:13:22 +00:00

Merge pull request 'fix(heimdallr): LAN-direct bindings + angie proxy headers' (#15) from feat/heimdallr-lan-direct into main

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

litelotus/.nix!15

No description provided.