| Property | Value |
|---|---|
| Host VM | VM-SL-43 (Home Assistant) |
| Compose path | — (HA OS image, not a Docker compose stack) |
| Image | Home Assistant Core 2026.4.4 on Home Assistant OS |
| Container name(s) | — (HA OS internal: supervisor + core + add-ons) |
| External URL | <https://smart.home.korff.wtf (Public via Traefik auf vm-hm-edge-01 (10.150.100.101)) + http://10.100.100.95:8123 (LAN/VPN direct)> |
| Networks | Server VLAN 1000 (10.100.100.95) with hypervisor-level firewall flag enabled |
| DB / state | HA OS internal (/config dir, Supervisor-managed). Recorder DB stores entity history. |
| Auth | Local HA accounts. Long-lived API token in .secrets/credentials.env (HA__TOKEN, JWT, exp 2036-04). |
| Backup | PBS image-level via VE-IO-01. Plus internal HA "Backups" feature can be configured to snapshot /config and add-ons. |
Central control plane for the household: lighting, climate, security cameras, door / shutter control, energy monitoring (solar / Fronius), presence-tracking, voice assistant integration. Mobile-app webhooks from Android push events (e.g. carport / eingang camera views).
Home Assistant Core 2026.4.4 running on Home Assistant OS (KVM guest on VE-IO-01). Talks to a heterogeneous device fleet via ~167 top-level integrations including: ZHA (Zigbee), Matter, BTHome (Bluetooth), HomematicIP Local, LocalTuya, Shelly (many), SwitchBot, Sonos, UniFi (network awareness), Plex, Spotify, AppleTV, SamsungTV, WebOSTV, Nuki (locks), Roborock (vacuum), Miele, Synology DSM, Fronius (solar inverter), Forecast.Solar, FRITZ!Box (call monitor), Mobile App push, NodeRED, HACS (custom components). 351 components loaded.
/config dir on the HA OS partition (scope of internal backups)https://smart.home.korff.wtfde/config/www, /mediaLAN: 10.100.100.95:8123 (open to LAN + VPN clients). Public: smart.home.korff.wtf via Apache vhost on VM-SL-21 (TLS terminated there with Let's Encrypt cert; reverse-proxied to http://10.100.100.95:8123).
Local Home Assistant accounts (no Authentik OIDC integration today). Long-lived API tokens for automation (this repo holds one: HA__TOKEN).
Inventory snapshot 2026-04-29 (via REST API):
| Domain | Count |
|---|---|
| Total entities | 2,577 |
sensor |
986 |
binary_sensor |
366 |
device_tracker |
278 |
button |
184 |
update |
149 |
event |
139 |
switch |
122 |
light |
78 |
automation |
58 |
cover |
46 (rolladen / garage) |
media_player |
33 |
climate |
14 (thermostats — bedroom, bathroom, living room, guest room) |
scene |
12 |
select |
10 |
camera |
8 (Eingang, Garten, Terrasse, Ecke, IO Event, Carport, Lager0, Lager E1) |
person |
4 (Alexander, Mathias, Rowena Korff + rp-io-09 device) |
vacuum |
1 (Roborock) |
lock |
1 |
weather |
1 |
script |
0 |
Notable integrations active:
zha, matter, bthomecamera.eingang, camera.garten, camera.terrasse, camera.ecke, camera.io_event, camera.carport, camera.lager0, camera.lager_e1_cam_1PBS image-level via VE-IO-01 covers the whole VM. HA Supervisor's own "Backups" feature can additionally snapshot /config + add-on state for finer-grained recovery (configure schedule + retention in HA UI → Settings → Backup).
https://smart.home.korff.wtf/api/<endpoint> with Authorization: Bearer <HA__TOKEN>/api/config, /api/states, /api/services, /api/services/<domain>/<service> (POST)/api/websocket for richer introspection (devices, area registry)Seit 2026-05-02 läuft das Reverse-Proxying via Traefik auf vm-hm-edge-01. HA braucht in configuration.yaml:
http:
use_x_forwarded_for: true
trusted_proxies:
- 10.150.100.101
Alternativ kann auf der EDGE eine strip-xff Middleware verwendet werden (Workaround weil HA-API trusted_proxies nicht setbar). Siehe migration/2026-05-02-vm-sl-21-archive.