windyboy
5b0f7950e6
Document HAOS on PVE VM 180 (LAN55) with verified SSH access, network details, and cross-links from lan-overview, inventory, and AGENTS quick map.
56 lines
1.9 KiB
Markdown
56 lines
1.9 KiB
Markdown
# hass.windy.lan — Home Assistant (HAOS)
|
|
|
|
## Role and access
|
|
|
|
| Item | Value |
|
|
|---|---|
|
|
| Role | Home Assistant automation hub |
|
|
| IPv4 | `192.168.55.11` (LAN55) |
|
|
| DNS | `hass.windy.lan` (AdGuard rewrite on `dns.windy.lan`; legacy `hass.local` alias) |
|
|
| SSH | `ssh hassio@hass.windy.lan` |
|
|
| **Host** | **PVE VM 180 (`haos`)** — not a separate physical host (verified 2026-08-09) |
|
|
| Platform | Home Assistant OS; kernel `6.1.115-haos` (aarch64) |
|
|
| Web UI | `http://hass.windy.lan:8123` (LAN); WAN port-forward `hass` on gw → `:8123` |
|
|
|
|
Use `hassio` for routine SSH inspection. Key-only login was verified on
|
|
2026-08-13 from the WSL client (`BatchMode=yes`). The `ha` supervisor CLI is
|
|
present (`/usr/bin/ha`) but returns `unauthorized` without a supervisor API
|
|
token; use the web UI or SSH shell for read-only checks unless a token is
|
|
configured out of band.
|
|
|
|
The current SSH ED25519 host-key fingerprint is
|
|
`SHA256:DMcMOgDzFsFTon1fndXowEP7jlyOK3/AX3PVK8BATvk` (verified 2026-08-13).
|
|
Verify a changed key out of band before accepting it.
|
|
|
|
Do not store Home Assistant long-lived tokens, integration credentials, or
|
|
recovery codes in this repository.
|
|
|
|
## Network
|
|
|
|
| Interface | Address / role |
|
|
|---|---|
|
|
| `end1` | `192.168.55.11/24`; primary LAN55 address |
|
|
| `wg0` | `10.13.13.2/32`; WireGuard (add-on / integration tunnel) |
|
|
| `hassio` / `docker0` | internal HAOS Docker bridges (`172.30.32.0/23`, `172.30.232.0/23`) |
|
|
|
|
LAN55 clients reach the HTTP API on `dns.windy.lan:80` for the AdGuard Home
|
|
integration; see [hosts/dns.windy.lan.md](dns.windy.lan.md).
|
|
|
|
## Safe verification
|
|
|
|
```bash
|
|
ssh -o BatchMode=yes hassio@hass.windy.lan 'hostname; ip -4 addr show end1'
|
|
```
|
|
|
|
From a LAN client, confirm DNS and UI reachability:
|
|
|
|
```bash
|
|
getent hosts hass.windy.lan
|
|
# expect 192.168.55.11
|
|
```
|
|
|
|
## Related docs
|
|
|
|
- [docs/lan-overview.md](../docs/lan-overview.md) — LAN map and gw port-forward
|
|
- [hosts/dns.windy.lan.md](dns.windy.lan.md) — `hass.windy.lan` / `hass.local` rewrites
|