Nginx

Home Assistant TLS Client Certificate - HTTP Basic Auth on Steroids

TLS has a rarely used, but very useful feature: Client Authentication using certificates. This allows us to safely reach Home Assistant behind a Reverse Proxy without exposing Home Assistant directly without the hassle of dealing with additional passwords like with Basic Auth (which doesn’t seem to be fully supported with the Android App) or having to connect to your home with a VPN everytime you want to check your Home Assistant.
Read more