March 4, 2026· updated April 23, 2026Grzegorz Mruk2 min read

Remote Access to Domoticz - Without VPN or Open Ports

How to securely access Domoticz from anywhere. SSH tunnel instead of VPN and port forwarding - setup in 60 seconds.

DomoticzRemote AccessSSH TunnelSmart Home
Remote Access to Domoticz - Without VPN or Open Ports

Domoticz - A Lightweight Home Automation System#

Domoticz is a lightweight, open-source home automation system that runs on Raspberry Pi, NAS devices, and Linux servers. It supports hundreds of Z-Wave, Zigbee, Wi-Fi, and 433 MHz devices - from temperature sensors to roller shutter controllers.

The problem comes when you want to control your home remotely. By default, Domoticz only works on your local network.

Common Solutions (and Their Drawbacks)#

VPN#

  • Complex WireGuard/OpenVPN setup
  • Requires an open port on your router
  • Drains phone battery
  • Doesn't work with CGNAT (many ISPs)

Port Forwarding#

  • Domoticz port 8080 exposed to the entire internet
  • No HTTPS by default - passwords sent in plain text
  • Requires a static IP or DDNS
  • Every router configures differently

Domoticz Cloud (MyDomoticz)#

  • Official service, but limited
  • Requires account and config in Domoticz settings
  • No support for additional services (Grafana, Node-RED)
  • Limited reliability

A Better Approach: SmartHomeEntry#

SmartHomeEntry creates a secure SSH tunnel from your server to our relay. No open ports, no router configuration.

How It Works#

  1. Install the agent with a single command on your Domoticz server
  2. The agent creates an outbound SSH connection to the relay
  3. Domoticz gets a permanent HTTPS subdomain (e.g., smith.smarthomeentry.com)
  4. Open the subdomain in your browser - done

Installation#

curl -fsSL https://get.smarthomeentry.com | sudo bash -s -- --token YOUR_TOKEN

The agent automatically detects Domoticz on port 8080 and configures the tunnel.

Method Comparison#

SmartHomeEntryVPNPort ForwardingMyDomoticz
Setup time~1 minute1-4 hours30-60 min~10 min
Router configNoYesYesNo
Works with CGNATYesNoNoYes
HTTPSYesNoNoYes
Multi-serviceYesYesLimitedDomoticz only
Open portsZero1+1+Zero

Security#

  • SSH-2 with Ed25519 keys - industry standard
  • Zero open ports - outbound tunnel only
  • No passwords - cryptographic keys exclusively
  • Kill switch - disable access with one click

Domoticz + Additional Services#

If you run other services alongside Domoticz - Grafana, Node-RED, Portainer - SmartHomeEntry handles them all through a single tunnel. Each service gets its own HTTPS subdomain.

Get Started in 60 Seconds#

Sign up, install the agent, and get secure access to Domoticz from anywhere in the world.

Start your free 7-day trial →

DomoticzRemote AccessSSH TunnelSmart Home
Share this article
About the author

Grzegorz Mruk

Founder and CEO of SmartHomeEntry. After hundreds of remote-access deployments for Home Assistant, Domoticz and NAS, he writes about what actually works on a home network - no marketing, from a practitioner's point of view.

    Remote Access to Domoticz - Without VPN or Open Ports | SmartHomeEntry