Secure dashboard and SSH credentials

The dashboard and SSH password should have support to be configurable by the end-user.  I get if your environment is already compromised you've got other problems, but considering this has access to so many devices, IMO, this is a critical asset to protect on the network.

abigmoocow wrote:

The dashboard and SSH password should have support to be configurable by the end-user.  I get if your environment is already compromised you've got other problems, but considering this has access to so many devices, IMO, this is a critical asset to protect on the network.

LOTS of stuff breaks.  Highly not recommended.  Yes, lock down your network.

Keep in mind that SSH is not a functionality of myServer, but rather the operating system that myServer runs on.  So, as security best practices change, so can your installation by altering said SSH technology. 

Design your automation infrastructure such that critical failures can not occur... For example, computers should not know how to start a fire for example.   I personally would never trust anything automating or controlling my fireplace! Been doing automation since the late 70's and experience tells me that right when I tell the automation system to turn on the fire in the fireplace, a gas leak would occur at the same time. 

It is a wise decision to limit your HVAC "heat" and "cool" settings to top and bottom levels. Back in the day when my Elk controlled the HVAC in the house, I created rules that enforced high or low temp limits and set notifications thereof. 

Am I perfect on this, certainly not. Just use common sense on these endeavors....

Take care...