haos¶
| Field | Value |
|---|---|
| ID | haos |
| Class | appliance |
| Kind | N/A |
| Role | home-automation |
| Status | active |
| Primary IP | 192.168.6.227 |
Overview¶
Home Assistant OS VM on Proxmox (VM 200). Zigbee via SLZB-06M on IoT; integrations for smart-home devices across VLANs.
Access¶
| Method | URL / host |
|---|---|
| Direct (LAN) | http://192.168.6.227:8123 |
| Traefik + Authentik (preferred) | https://homeass.realemail.app |
| Inventory DNS | haos.lab.local → 192.168.6.227 |
Internal DNS: After AdGuard cutover, homeass.realemail.app must rewrite to
saltierpoop (192.168.6.243) — see AdGuard Saltbox rewrites.
Without it, the name resolves to Cloudflare and the UI fails on LAN.
Traefik file route: /opt/traefik/homeass.yml on saltierpoop → backend
http://192.168.6.227:8123.
Configuration¶
- Proxmox VM 200; USB passthrough for coordinators
- Not Ansible-managed (
entity_class: appliance)
Observability¶
Central syslog → Graylog LXC 109 via mib1185/ha-addon-syslog
(owner add-on, configured 2026-06-26). Target 192.168.6.197:514 UDP.
See Central syslog (Graylog).
SIEM is Wazuh on managed Linux hosts — HAOS does not run a Wazuh agent.
Runbooks¶
- 15-month retention and Ford location timeline
- Central syslog (Graylog) — HAOS add-on steps
- Phase 7R ZBF remediation — HA ↔ IoT/GenPop firewall
- AdGuard DNS rewrites