From 5b0f7950e6d6288ee626eebaca480cef32ca191e Mon Sep 17 00:00:00 2001 From: windyboy Date: Thu, 13 Aug 2026 14:10:39 +0800 Subject: [PATCH] docs: add hass.windy.lan Home Assistant host documentation Document HAOS on PVE VM 180 (LAN55) with verified SSH access, network details, and cross-links from lan-overview, inventory, and AGENTS quick map. --- AGENTS.md | 1 + docs/lan-overview.md | 19 ++++++++++++-- hosts/hass.windy.lan.md | 55 +++++++++++++++++++++++++++++++++++++++++ inventory/hosts.md | 1 + 4 files changed, 74 insertions(+), 2 deletions(-) create mode 100644 hosts/hass.windy.lan.md diff --git a/AGENTS.md b/AGENTS.md index fb878f3..1bb70ca 100644 --- a/AGENTS.md +++ b/AGENTS.md @@ -32,6 +32,7 @@ Also readable as `agent.md` (symlink → this file). | **gfw.windy.lan** | OpenWrt LAN gateway / OpenClash | `ssh -4 root@192.168.66.1` | [hosts/gfw.windy.lan.md](hosts/gfw.windy.lan.md) | | **gw** | EdgeRouter X primary LAN gateway | `ssh -4 zhiqiang@192.168.66.254` | [hosts/gw.md](hosts/gw.md) | | **ubnt** | UniFi Network Controller | `ssh -4 windy@192.168.66.46` | [hosts/ubnt.md](hosts/ubnt.md) | +| **hass.windy.lan** | Home Assistant (HAOS, LAN55) | `ssh hassio@hass.windy.lan` | [hosts/hass.windy.lan.md](hosts/hass.windy.lan.md) | ### Public services diff --git a/docs/lan-overview.md b/docs/lan-overview.md index df21d3c..4ae4b0f 100644 --- a/docs/lan-overview.md +++ b/docs/lan-overview.md @@ -51,7 +51,7 @@ from each section below. | **gfw.windy.lan** | OpenWrt LAN gateway / OpenClash — **PVE VM 140** | `ssh -4 root@192.168.66.1` | `192.168.66.1` | [hosts/gfw.windy.lan.md](../hosts/gfw.windy.lan.md) | | **dns.windy.lan** | AdGuard Home LAN DNS + Mihomo explicit proxy — **PVE VM 120** (`pihole`) | `ssh -4 windy@192.168.66.36` | `192.168.66.36` | [hosts/dns.windy.lan.md](../hosts/dns.windy.lan.md) | | **ubnt** | UniFi Network Controller — **PVE VM 160** | `ssh -4 windy@192.168.66.46` | `192.168.66.46` | [hosts/ubnt.md](../hosts/ubnt.md) | -| **haos** | Home Assistant (HAOS) — **PVE VM 180** (LAN55) | — | `192.168.55.11` | — | +| **hass.windy.lan** | Home Assistant (HAOS) — **PVE VM 180** (LAN55) | `ssh hassio@hass.windy.lan` | `192.168.55.11` | [hosts/hass.windy.lan.md](../hosts/hass.windy.lan.md) | | **NAS/FreeNAS** | NAS; `transmission` jail runs here (`.51`) | — | — | — | | **U6 Lite** | UniFi AP (LAN66) | `ssh -4 zhiqiangf@192.168.66.6` | `192.168.66.6` | [docs/unifi-network.md](../docs/unifi-network.md) | | **UAP-AC-Lite** | UniFi AP (LAN55) | `ssh -4 zhiqiangf@192.168.55.5` | `192.168.55.5` | [docs/unifi-network.md](../docs/unifi-network.md) | @@ -145,6 +145,19 @@ See [docs/unifi-openclash-localhost.md](../docs/unifi-openclash-localhost.md). --- +## hass.windy.lan — Home Assistant (HAOS) + +| Item | Value | +|------|-------| +| IPv4 | `192.168.55.11` (LAN55) | +| DNS | `hass.windy.lan` (AdGuard rewrite; legacy `hass.local` alias) | +| SSH | `ssh hassio@hass.windy.lan` (key-only, verified 2026-08-13) | +| Web UI | `http://hass.windy.lan:8123` | +| WAN | gw port-forward `hass` → `192.168.55.11:8123` | +| Platform | HAOS; kernel `6.1.115-haos` (aarch64) | + +--- + ## Managed access points | Name | Model | Mgmt IP | Firmware | Network | Inform | @@ -165,6 +178,7 @@ AP SSH account is `zhiqiangf` (key-only, verified). See [docs/unifi-network.md]( | Transparent/explicit proxy (OpenClash) | gfw.windy.lan | `ssh -4 root@192.168.66.1` | | LAN DNS (AdGuard Home) + Mihomo proxy | dns.windy.lan | `ssh -4 windy@192.168.66.36` | | UniFi controller + dockge | ubnt | `ssh -4 windy@192.168.66.46` | +| Home Assistant | hass.windy.lan | `ssh hassio@hass.windy.lan` · UI `:8123` | | Wi-Fi APs | U6 Lite / UAP-AC-Lite | via controller | --- @@ -175,9 +189,10 @@ AP SSH account is `zhiqiangf` (key-only, verified). See [docs/unifi-network.md]( - [hosts/gfw.windy.lan.md](../hosts/gfw.windy.lan.md) — OpenClash listeners - [hosts/dns.windy.lan.md](../hosts/dns.windy.lan.md) — AdGuard Home + Mihomo detail - [hosts/ubnt.md](../hosts/ubnt.md) — UniFi controller + proxy contract +- [hosts/hass.windy.lan.md](../hosts/hass.windy.lan.md) — Home Assistant (HAOS) SSH + LAN access - [docs/unifi-network.md](../docs/unifi-network.md) — APs, inform endpoint, recovery - [docs/unifi-third-party-vlan10-dhcp.md](unifi-third-party-vlan10-dhcp.md) — VLAN Wi-Fi feasibility and DHCP boundary - [docs/unifi-openwrt-vlan10-implementation-examples.md](unifi-openwrt-vlan10-implementation-examples.md) — supported topology and examples - [docs/edgerouter-x-configuration.md](../docs/edgerouter-x-configuration.md) — effective gw config - [docs/unifi-openclash-localhost.md](../docs/unifi-openclash-localhost.md) — proxy bypass -- [runbooks/adguard-home-health.md](../runbooks/adguard-home-health.md) — AGH health +- [runbooks/adguard-home-health.md](../runbooks/adguard-home-health.md) — AGH health \ No newline at end of file diff --git a/hosts/hass.windy.lan.md b/hosts/hass.windy.lan.md new file mode 100644 index 0000000..0ac9dcd --- /dev/null +++ b/hosts/hass.windy.lan.md @@ -0,0 +1,55 @@ +# hass.windy.lan — Home Assistant (HAOS) + +## Role and access + +| Item | Value | +|---|---| +| Role | Home Assistant automation hub | +| IPv4 | `192.168.55.11` (LAN55) | +| DNS | `hass.windy.lan` (AdGuard rewrite on `dns.windy.lan`; legacy `hass.local` alias) | +| SSH | `ssh hassio@hass.windy.lan` | +| **Host** | **PVE VM 180 (`haos`)** — not a separate physical host (verified 2026-08-09) | +| Platform | Home Assistant OS; kernel `6.1.115-haos` (aarch64) | +| Web UI | `http://hass.windy.lan:8123` (LAN); WAN port-forward `hass` on gw → `:8123` | + +Use `hassio` for routine SSH inspection. Key-only login was verified on +2026-08-13 from the WSL client (`BatchMode=yes`). The `ha` supervisor CLI is +present (`/usr/bin/ha`) but returns `unauthorized` without a supervisor API +token; use the web UI or SSH shell for read-only checks unless a token is +configured out of band. + +The current SSH ED25519 host-key fingerprint is +`SHA256:DMcMOgDzFsFTon1fndXowEP7jlyOK3/AX3PVK8BATvk` (verified 2026-08-13). +Verify a changed key out of band before accepting it. + +Do not store Home Assistant long-lived tokens, integration credentials, or +recovery codes in this repository. + +## Network + +| Interface | Address / role | +|---|---| +| `end1` | `192.168.55.11/24`; primary LAN55 address | +| `wg0` | `10.13.13.2/32`; WireGuard (add-on / integration tunnel) | +| `hassio` / `docker0` | internal HAOS Docker bridges (`172.30.32.0/23`, `172.30.232.0/23`) | + +LAN55 clients reach the HTTP API on `dns.windy.lan:80` for the AdGuard Home +integration; see [hosts/dns.windy.lan.md](dns.windy.lan.md). + +## Safe verification + +```bash +ssh -o BatchMode=yes hassio@hass.windy.lan 'hostname; ip -4 addr show end1' +``` + +From a LAN client, confirm DNS and UI reachability: + +```bash +getent hosts hass.windy.lan +# expect 192.168.55.11 +``` + +## Related docs + +- [docs/lan-overview.md](../docs/lan-overview.md) — LAN map and gw port-forward +- [hosts/dns.windy.lan.md](dns.windy.lan.md) — `hass.windy.lan` / `hass.local` rewrites diff --git a/inventory/hosts.md b/inventory/hosts.md index 6b6a248..a8b566a 100644 --- a/inventory/hosts.md +++ b/inventory/hosts.md @@ -27,6 +27,7 @@ the software deployed there, see [the LAN overview](../docs/lan-overview.md). | **dns.windy.lan** | AdGuard Home LAN DNS + Mihomo explicit proxy (PVE VM 120) | `ssh -4 windy@192.168.66.36` | `192.168.66.36` | **active** | [hosts/dns.windy.lan.md](../hosts/dns.windy.lan.md) | | **gw** | EdgeRouter X primary LAN gateway | `ssh -4 zhiqiang@192.168.66.254` | `192.168.66.254` | **active** | [hosts/gw.md](../hosts/gw.md) | | **ubnt** | UniFi Network Controller (PVE VM 160) | `ssh -4 windy@192.168.66.46` | `192.168.66.46` | **active** | [hosts/ubnt.md](../hosts/ubnt.md) | +| **hass.windy.lan** | Home Assistant (HAOS, PVE VM 180, LAN55) | `ssh hassio@hass.windy.lan` | `192.168.55.11` | **active** | [hosts/hass.windy.lan.md](../hosts/hass.windy.lan.md) | `status: stub` = known to exist; fill `hosts/.md` when next touched.