Mind that I am very noob into self-hosting, reverse proxies and the like

When I saw that Caddy automatically handled the HTTPS thingies I was like “this is my moment then to go into self-hosting”. Caddy seemed so simple.

Turns out… I am suddenly discovering that the connection between the caddy machine and the Home Assistant machine (both in the local network) is non-encrypted. So if another appliance in my local network went rogue… bum, all my info gets leaked… right?

This might sound weird because it might actually be super-duper complicated but… how come in 2025 we still don’t auto-encrypt local comms?

Please be kind. Lot’s of love. Hopefully I’ll dig my way to self-hosting wisdom.

  • darkan15@lemmy.world
    link
    fedilink
    English
    arrow-up
    8
    ·
    24 hours ago

    If your concern is IoT devices, TVs, and the like sniffing on your local traffic, there are alternatives, and some of them are:

    • https from reverse proxy to service.
    • VLANs or Different LANs for IoT and your trusted devices (I do this one).
    • Internal VPN connection between devices (like WireGuard), so the communication between selected devices is encrypted.