27
Voice control is dangerous
(lemmy.nz)
This morning my kid asked the voice assistant to "Turn off the computers in this house".
I heard it, thought well that's a strange request but seems harmless because how is home assistant gonna turn off computers.
Me a little while later, "why is shit broken? What's happening!"
Turns out dumb me had adguard exposed to the voice assistant, it switched off all the adguard settings including the DNS rewriting that is the cornerstone of many of my self-hosted services.
I've since revoked that access.
Might be a good idea to expose things through a reverse proxy if this is web interfaces. I have *.local.domain.nexus all pointed to my reverse proxy's internal ip address and the reverse proxy makes everything available through https.
Everything is exposed through a reverse proxy. E.g. homeassistant.mydomain.nz
However, I have DNS rewriting set in Adguard that does *.mydomain.nz -> 192.168.1.XX
This means a) things don't need to go external if I'm at home, and b) I have many things only accessible internally, which rely on this otherwise they won't work at all.
It's all HTTPS, I just use a cloudflare integration in Traefik to do the Let's Encrypt validation for domains not accessible externally.