---
title: "NGINX Home Assistant SSL proxy"
description: "NGINX Home Assistant SSL proxy is an app for Home Assistant. It has 19.3k installs sharing analytics and was last updated October 26, 2026."
canonical: "https://vulpo.app/integrations/apps/nginx-proxy"
url: "https://vulpo.app/integrations/apps/nginx-proxy.md"
last-updated: "2026-10-22"
version: "1.4"
---

# NGINX Home Assistant SSL proxy

> NGINX Home Assistant SSL proxy is an app for Home Assistant. It has 19.3k installs sharing analytics and was last updated October 26, 2026.

NGINX Home Assistant SSL proxy is an app that runs an SSL/TLS proxy in front of Home Assistant. It is commonly paired with the Duck DNS or Let's Encrypt apps to provide secure remote access, using certificate and key files stored in the SSL directory. Options cover the domain name, an optional Strict-Transport-Security header, and extra NGINX configuration files for the default server and additional servers read from the share directory. It can also load Cloudflare IP addresses so IP banning works correctly, connect to the backend over SSL, and read the real client address through Proxy Protocol from an upstream load balancer. HTTP/3 over QUIC can be enabled on a chosen UDP port alongside HTTP/2 and HTTP/1.1. It requires Home Assistant OS, runs on aarch64 and amd64, and has no sidebar page.

Automatic summary of the docs and configuration of home-assistant/apps. Something wrong, or are you the maintainer and want your own text here? [Get in touch](https://vulpo.app/contact)

[Open in My Home Assistant](https://my.home-assistant.io/redirect/supervisor_app/?app=core_nginx_proxy)

Apps need Home Assistant OS. Container and Core installs cannot run them.

## Supports

- **Updated with Home Assistant**: Ships and updates with every Home Assistant release.

## Setting it up

Install it under Settings, Apps, then start it.

## Permissions

- **Supervisor API**: Can talk to the Supervisor, which manages apps and the system.

## Network

- `443/tcp`: HTTPS (SSL) Port

## Configuration

- **Domain**: The domain name to use for the proxy.
- **HSTS**: Value for the HSTS HTTP header to send. If empty, the header is not sent.
- **Certificate File**: The certificate file to use in the /ssl directory.
- **Private Key File**: Private Private Key File to use in the /ssl directory.
- **CloudFlare**: If enabled, configure Nginx with a list of IP addresses directly from Cloudflare that will be used for set\_real\_ip\_from directive Nginx config.
- **Use SSL Backend**: If enabled, configure Nginx to use SSL to connect to backend.
- **Max body size (in MB)**: Configures Nginx to limit the maximum allowed size of the client request body, specified in megabytes. Set to 0 to allow requests of any size.
- **Customize**: See the Documentation tab for more information about these options.
- **Real IP from (enables PROXY protocol)**: Configures Nginx to use TCP Proxy Protocol, specifies what IP to trust TLS upstream requests from.

## At a glance

- Kind: App
- Number: 19.3k installs sharing analytics
- Connection: Connection not stated
- Upkeep: Part of Home Assistant
- Needs: Needs Home Assistant OS
- Runs on: 64-bit ARM, x86-64
- Latest version: 4.5.1, last updated October 26, 2026
- Source: <https://github.com/home-assistant/apps>

Independent directory, made by the developer of Vulpo. Not affiliated with Home Assistant or the Open Home Foundation. [About these numbers](https://vulpo.app/integrations/about)

Last updated 2026-10-22. Source: https://vulpo.app/integrations/apps/nginx-proxy

---

- HTML version of this page: https://vulpo.app/integrations/apps/nginx-proxy
- Site index for agents: https://vulpo.app/llms.txt
- Everything in one document: https://vulpo.app/llms-full.txt
- All pages: https://vulpo.app/sitemap.xml