docker2homeassistant
🚀 docker2homeassistant v0.0.4
First public version with a complete onboarding and security layer, ready to be exposed safely outside the local network.
🔐 Authentication & Security
- Added local authentication with default credentials
admin / adminon first run. - New onboarding wizard:
- Step 1 – Force password change (and optional username change) on first login.
- Step 2 – Optional TOTP 2FA (Google Authenticator, Aegis, etc.), with guided setup.
- Step 3 – Explanation and initial configuration of:
- Safe mode (enabled by default, protects critical actions).
- Performance mode (optional, reduces polling and UI load).
- Step 4 – Explanation of MQTT autodiscovery and initial choice to enable/disable default entities.
- Session cookies hardened for better security when running behind HTTPS.
- Basic protection against brute–force on the login endpoint.
🧩 MQTT Autodiscovery
- First–run wizard now explains how autodiscovery works with Home Assistant.
- Option to enable all default MQTT entities or start with everything disabled and cherry–pick them later from the Autodiscovery page.
💄 UI & UX
- Added settings icon in the top–right corner to toggle Safe mode and Performance mode at any time.
- Small UX improvements and clearer texts around security–related actions.
⚠️ Notes
- On upgrade, the first access will go through the new onboarding wizard.
- Anyone with access to docker2homeassistant can control containers on the host: it is strongly recommended to use a strong password, enable 2FA and run behind HTTPS.