From dcd424089cf31af099f050371284928c50e8ac7c Mon Sep 17 00:00:00 2001 From: Fabian Affolter Date: Fri, 29 Jul 2016 22:26:24 +0200 Subject: [PATCH] Add warning about the API password --- source/_components/http.markdown | 4 ++++ source/getting-started/basic.markdown | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/source/_components/http.markdown b/source/_components/http.markdown index 98a88766f12..3d984ed8861 100644 --- a/source/_components/http.markdown +++ b/source/_components/http.markdown @@ -13,6 +13,10 @@ ha_category: "Other" The `http` component serves all files and data required for the Home Assistant frontend. You only need to add this to your configuration file if you want to change any of the default settings. +

+It's HIGHLY recommended that you set the `api_password`, especially if you are planning to expose your installation to the internet. +

+ ```yaml # Example configuration.yaml entry http: diff --git a/source/getting-started/basic.markdown b/source/getting-started/basic.markdown index 6eadc61a870..0c1b80f1730 100644 --- a/source/getting-started/basic.markdown +++ b/source/getting-started/basic.markdown @@ -42,6 +42,10 @@ http: api_password: YOUR_PASSWORD ``` +

+If you are planing to expose your Home Assistant instance to the internet and don't set a password then your installation could be accessed by everybody. +

+ See the [HTTP component documentation](/components/http/) for more options like HTTPS encryption. ### {% linkable_title Setting up your phone or tablet %}