konairius/homelab
10
0
Fork 0
Code Issues 9 Pull Requests 2 Packages Projects Releases 1 Wiki Activity

feat(home-assistant): let matter-server and zigbee2mqtt reach their update sources #1603

Merged
k.renner merged 1 commits from feat/matter-z2m-egress into main 2026-11-07 21:21:19 +00:00
Conversation 0 Commits 1 Files Changed 1
+43 -1
claude-bot commented 2026-11-07 21:20:16 +00:00
Member
Copy Link
Copy Source

New matter-server-egress (DNS + on.dcl.csa-iot.org, api.github.com, raw.githubusercontent.com on 443) and a raw.githubusercontent.com:443 rule in zigbee2mqtt-egress. matter-server needs the CSA DCL for PAA root certificates, vendor names and OTA metadata; zigbee2mqtt needs the Koenkk/zigbee-OTA index and images. Both were denied by the namespace baseline. Server-side dry-run passes.

S28-42

🤖 Generated with Claude Code

New `matter-server-egress` (DNS + on.dcl.csa-iot.org, api.github.com, raw.githubusercontent.com on 443) and a raw.githubusercontent.com:443 rule in `zigbee2mqtt-egress`. matter-server needs the CSA DCL for PAA root certificates, vendor names and OTA metadata; zigbee2mqtt needs the Koenkk/zigbee-OTA index and images. Both were denied by the namespace baseline. Server-side dry-run passes. S28-42 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-11-07 21:20:16 +00:00
feat(home-assistant): let matter-server and zigbee2mqtt reach their update sources
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
Details
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
Details
82165d6704 
matter-server fetches PAA root certificates, vendor names and OTA
metadata from the CSA DCL (on.dcl.csa-iot.org) and the development PAA
certificates from project-chip on GitHub (python-matter-server
helpers/paa_certificates.py, vendor_info.py, ota/dcl.py). zigbee2mqtt
fetches the Koenkk/zigbee-OTA index and images from
raw.githubusercontent.com (zigbee-herdsman ota.ts). The namespace
baseline denied all of it (~350 and ~200 drops a day), so certificate
refresh, vendor names and OTA silently failed. FQDN-scoped, 443 only.

S28-42

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit 1a3368e70d into main 2026-11-07 21:21:19 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
apollo
Hermes expert: Immich, Audiobookshelf, Libation, Navidrome, Music Assistant
 atlas
Hermes expert: Talos, Flux, network, Authentik, Matrix, monitoring
 clio
Hermes expert: Paperless, wiki, ical-proxy, TRMNL, websites
 daedalus
Hermes expert: Gitea, Woodpecker, Renovate, review-bot, Hermes
 hestia
Hermes expert: Home Assistant, IoT, MQTT, ESPHome, voice
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
alert-monitor-bot claude-bot (Claude Bot) flux hermes-bot issue-fix-bot k.renner renovate-bot review-bot (Review Bot) security-bot update-audit-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: konairius/homelab#1603