Alt account of @Badabinski

Just a sweaty nerd interested in software, home automation, emotional issues, and polite discourse about all of the above.

  • 0 Posts
  • 30 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2024

help-circle






  • Wireguard was written with the explicit goal of having sane, secure defaults. I totally feel you w.r.t. openvpn or ipsec, since it’s easy to do something wrong. Wireguard is much easier because it simply refuses to give you the choice to do things incorrectly.

    w.r.t. the certificate thing, you could set up a reverse proxy and do HSTS to ensure nobody can load up a rogue CA on your devices. HSTS has the issue that SSH has (trust on first use or whatever it’s called), but you just need to make sure nobody is MITM you for that first connecting and then you’ll be good to go. This would let you use a self-signed certificate if you do desired.









  • I spent several weeks evaluating options and really wanted to use LoRa for controlling some stuff in a detached machine shop, but I just couldn’t find reasonably priced sensors, switches, and gateways (or access points or whatever you call them in LoRa parlance). I seem to recall that one of the major integrations was cloud-polling only which was a huge no-go (same reason I didn’t buy in heavily into Yolink, I require 100% local control).

    Do you use LoRa? I’d love to hear what you use (brands and vendors to buy stuff from) if so. I try to have at least two different technologies controlling an area. That way, my zwave-js-ui pod occasionally shitting the bed won’t completely break an area.




  • Z-wave LR isn’t a mesh, and I’d highly recommend it. I have some very chatty smart plugs (I use them to share load on a breaker, so I need power usage updates quickly or the breaker will pop) and they’ve done a great job on LR.

    I avoid anything using WiFi unless it’s running open source software. I don’t want to manage an IOT VLAN, and there’s just no reason my sensors and plugs need to understand IPv4. I just want things to be reliable and self-contained.

    Like, I am a very choosy and grumpy person and I get immediately annoyed if I have any sort of connectivity issues. I’ve been using two Ruckus R750 APs in my 2400ft² (220m²) house with properly set minimum RSSIs, xmit power, and channel usage. IOT stuff owns 2.4 on its own channel as you’ve said. It’s wonderfully reliable and fast! My BLE proxies have had 100% availability (outside of power outages, since only my central rack has battery backup). So is my single 800 series Z-wave LR radio that runs off of PoE and is wired in just like any other AP.

    I absolutely ditched zigbee for anything other than sensors though. I just couldn’t count on it.