How to control Domoticz over 3G?

[pecora]

I am a novice with Domoticz. I would like to Domoticz operate remotely over 3G on my iPhone with Pilot Home Automation. How can I arrange this via the server settings?

A huge thank you for your response.

[ThinkPad]

• Create a user with a difficult (!!!) password (something like: 'SDlfjk2348sxx@#$' you only have to enter it once on your phone) in Domoticz.
• Then create a port forward in your router (see Google for instructions "portforward <routermodel>"). If possible to select an outside port different to the internal: do that.
  I have forwarded 8080 (internal Domoticz) to something like: 2389 or so (not a common used port, minimizes the amount of portscans).
• If possible use HTTPS/SSL in Domoticz

By following these three advices you have a fairly secure option to control Domoticz from outside. But best is to use a VPN (i prefer OpenVPN). That way it is even more secure, and the VPN can also be used to do things like banking stuff on a shady hotspot.

[pecora]

Thinkpad, thanks for your response to my post. The three points you mentioned, I have arranged. What's the next step?

Thanks in advance!

[ThinkPad]

Find out your external ip (http://www.icanhazip.com), fill it in in the app together with the outside port and then you should be done.

[pecora]

Ok, everything I set exactly as indicated. unfortunately I do not get it working. The Ras Pi is coupled to an Apple Airport Time Capsule. Can this possibly cause problems?

[ThinkPad]

Check with a website like http://www.yougetsignal.com/tools/open-ports/ if the port you forwarded is really openend.

P.S. Topic moved to "Functionalities and Protocols > Connection and Security"

[Giome]

Hi ThinkPad,

You write "If possible use HTTPS/SSL in Domoticz"

But how can you do that ? I'm on Synology RS2414+ and redirect http => https and I can't access at the app...
https://mydomain.info:8084 => not working
http://mydomain.info:8084 => work but I need to desactivate redirection http to https in my NAS.

Can you help me please ?

[ThinkPad]

I don't know, i don't use it because i don't know how to enable it

[Giome]

Hi,

Thanks for your reply and too bad !!!

I don't want to use Domoticz without a minimum level of security.
I want manage my alarm too so without https it will be just stupid to use this app...
So sad.

If someone know how to do use Domoticz with https => PLEASE HELP

[Domosapiens]

Forum search on HTTPS port gives:
HTTPS port 443

D

[jannl]

If you install/activate a vpn on your router or nas, you don't need to worry about https.

[LJ80]

If you install/activate a vpn on your router or nas, you don't need to worry about https.

Hi Jan,

I want the same as the topic starter, a safe 3G/4G connection to my domoticz.
But I also have a QNAP-NAS.

What would be better/easier to set up? (NAS/PI)
Set up A VPN in my pi as mentioned in the wiki looks difficult to me.

By with your post I understand I can also make a VPN connection with my QNAP?
And then it is easy to acces my domoticz/pi with 3G/4G??

[jannl]

That's how I connect over 3g/3.5g (no 4g yet )
Anyway, I have a Synology NAS on which I played with VPN, which worked. Now my VPN runs on my FRITZbox, since that is directly connected to the internet.

According to Google: https://www.qnap.com/i/nl/trade_teach/c ... wone&cid=3, VPN can be configured on a QNAP NAS.

Whenever I need access to my Domoticz, I set up a VPN connection to my Fritzbox (router), either via wifi or 3g/4g and connect directly to Domoticz (or every other home network appliance).

I once switched my lights from somewhere in Spain, when my son was at home, worked like a charm.

[LJ80]

That's how I connect over 3g/3.5g (no 4g yet )
Anyway, I have a Synology NAS on which I played with VPN, which worked. Now my VPN runs on my FRITZbox, since that is directly connected to the internet.

According to Google: https://www.qnap.com/i/nl/trade_teach/c ... wone&cid=3, VPN can be configured on a QNAP NAS.

Whenever I need access to my Domoticz, I set up a VPN connection to my Fritzbox (router), either via wifi or 3g/4g and connect directly to Domoticz (or every other home network appliance).

I once switched my lights from somewhere in Spain, when my son was at home, worked like a charm.

Oke looks great for sure I will set up a VPN connection!
One more question, so it is always necessary to first make the VPN connection with you phone and then acces domoticz with Pilot for example.
It is not possible when using pilot that pilot login automaticly with the VPN server?

Or is it a option always having the VPN connection on your phone connected?
Or are there be negative aspects with always using VPN with your phone?

[jannl]

In principle there are no downsides at having your VPN always on, on your phone.
But remember, all network traffic from your phone will be redirected (normally) via the VPN, so if your upload bandwith at home is not very high, internet etc on your phone will be slow(er).

Advantage is, you also can use this VPN when using a less trusted WIFI connection somewhere.

I do not know pilot, so I do not know if pilot can set up a VPN connection. But I guess not.

[LJ80]

In principle there are no downsides at having your VPN always on, on your phone.
But remember, all network traffic from your phone will be redirected (normally) via the VPN, so if your upload bandwith at home is not very high, internet etc on your phone will be slow(er).

Advantage is, you also can use this VPN when using a less trusted WIFI connection somewhere.

I do not know pilot, so I do not know if pilot can set up a VPN connection. But I guess not.

Thanks for your info, I will try!

[ThinkPad]

I use 'Tasker' on my Android phone to automatically connect to my home VPN when it notices that my phone has connected to the WiFi-network of the company i work at. Have a look on Google "tasker automatically connect vpn wifi".

You could use it also the other way round: Connect to VPN when on wifi, unless <networkname> is in list of trusted networks (your home network for example).

For control over 3G i have made portforward (on a not so common port like '2834') and made a user with a strong(!!) password ('JJs0783xgx06' for example).

[LJ80]

I use 'Tasker' on my Android phone to automatically connect to my home VPN when it notices that my phone has connected to the WiFi-network of the company i work at. Have a look on Google "tasker automatically connect vpn wifi".

unfortunately I have an Iphone6 and there is no tasker for this right?

You could use it also the other way round: Connect to VPN when on wifi, unless <networkname> is in list of trusted networks (your home network for example).

So thats a tasker setting, looks great but again, I have no android.

For control over 3G i have made portforward (on a not so common port like '2834') and made a user with a strong(!!) password ('JJs0783xgx06' for example).

Maybe I still will do this also, but it looks diffucult to me ad described in the wiki.
Maybe I'll backup my SD and just give it a try....

[ijobain]

Try this

https://developer.weaved.com/portal/members/betapi.php

[gardendwarf]

Hello to everybody

I hope I'm at the right place but it really seems so
Here are the facts
I have a domoticz set on a raspberry-Pi;
No problems to log in from the internal IP adress 192.168.0.148:8080 with my PC or my Ipad or my phone in Wifi mode (I have set a static IP for the raspberry) except sometimes it goes offline...I think it is when I try to connect from my smartphone in 3G mode because this connection is no more available...It used to be but I can't connect from outside my place anymore
My provider is Free and I have the Freebox revolution Box.
I have rerouted the ports 6144 to 6144 and 8000 to 8080 as I try to connect from MyIp 88.xxx.xxx.xxx:8000
I've tried countless combos of passwords and logins in Dromotica, Andromoticz...nothing happens (except crashes of my home Domoticz....)

I tried some days ago to set a time server but failed to write in the correct file...could it be a consequence ?

Thanks in advance
Looking forward to reading your answers

Gardendwarf (yes, I know, sounds like a superhero Name )