Skip to content
HLE
Login

Service Integrations

Quick-start guides for popular homelab and self-hosted services. All examples use --allow for SSO access control — replace the email with your own or remove it to require login from the tunnel owner only.

HLE can expose web services on your network. We test the services under Verified with automated end-to-end runs; everything under Community reported is not tested by us. If one doesn’t work, tell us.

Platform Guides

Section titled “Platform Guides”
🏠 Home Assistant Add-onInstall the native HA add-on with full web UI
🐳 DockerRun on any Docker host — full or headless mode
☸️ KubernetesOperator for GitOps, or the agent with cluster-wide service discovery
🖥️ Proxmox VELXC container or Docker VM on Proxmox
🛡️ pfSenseRun the agent on pfSense, OPNsense, or FreeBSD as an rc.d service
🗄️ TrueNASRun the agent as a TrueNAS SCALE app (24.10 Electric Eel or newer)

Community (not tested by us)

Section titled “Community (not tested by us)”
🤖 AI Agents (Claw)Expose agent Control UI with SSO

Verified

Section titled “Verified”

🏠 Home Assistant

Section titled “🏠 Home Assistant”

Home automation platform. WebSocket required for full UI functionality including Lovelace dashboards and real-time entity updates. Install via the HA Add-on

Home Assistant onboarding page reached through an HLE tunnel

Terminal window
hle tunnel create ha http://localhost:8123 --websocket --allow alex@gmail.com

Companion app

Section titled “Companion app”

Full HA setup including WebSocket for Lovelace and Companion App push. Set your tunnel URL as the External URL in HA > Settings > System > Network.

Terminal window
# Expose HA with websocket support
hle tunnel create ha http://localhost:8123 --websocket --allow google:alex@gmail.com


# In HA: Settings > System > Network
# Set External URL to your HLE tunnel URL
# e.g. https://ha-x7k.hle.world

🎬 Jellyfin

Section titled “🎬 Jellyfin”

Open-source media system. WebSocket for real-time playback sync.

Jellyfin login page reached through an HLE tunnel

Terminal window
hle tunnel create jellyfin http://localhost:8096 --websocket --allow google:alex@gmail.com

📊 Grafana

Section titled “📊 Grafana”

Monitoring and observability. WebSocket required for live dashboards.

Grafana login page reached through an HLE tunnel

Terminal window
hle tunnel create grafana http://localhost:3000 --websocket --allow github:devops-lead

☁️ Nextcloud

Section titled “☁️ Nextcloud”

Cloud storage and collaboration platform. Share with family or team.

Nextcloud login page reached through an HLE tunnel

Terminal window
hle tunnel create cloud http://localhost:80 --websocket --allow google:alex@gmail.com --allow google:partner@gmail.com

🖥️ Proxmox VE Web UI

Section titled “🖥️ Proxmox VE Web UI”

The Proxmox management interface runs on HTTPS port 8006 with a self-signed cert. HLE handles the TLS termination — use https:// in the service URL. See the Proxmox guide for full setup.

Proxmox VE login page reached through an HLE tunnel

Terminal window
hle tunnel create proxmox https://192.168.1.10:8006 --websocket --allow google:alex@gmail.com

📷 Immich

Section titled “📷 Immich”

Self-hosted photo and video backup. WebSocket for real-time updates.

Immich getting-started page reached through an HLE tunnel

Terminal window
hle tunnel create photos http://localhost:2283 --websocket --allow google:mom@gmail.com

🎧 Audiobookshelf

Section titled “🎧 Audiobookshelf”

Self-hosted audiobook and podcast server.

Audiobookshelf login page reached through an HLE tunnel

Terminal window
hle tunnel create audiobooks http://localhost:13378

🗄️ Synology DSM

Section titled “🗄️ Synology DSM”

DiskStation Manager, the Synology NAS web UI.

Terminal window
hle tunnel create nas http://localhost:5000 --allow alex@gmail.com

💾 TrueNAS

Section titled “💾 TrueNAS”

Network-attached storage. See the TrueNAS guide to run the agent as a TrueNAS SCALE app.

Terminal window
hle tunnel create truenas http://localhost:80

📺 The *arr suite

Section titled “📺 The *arr suite”

Sonarr, Radarr, Lidarr, Readarr, Prowlarr and Bazarr are media automation tools. Each runs its own web UI and gets its own tunnel:

  • Sonarr: hle tunnel create sonarr http://localhost:8989 --allow google:alex@gmail.com
  • Radarr: hle tunnel create radarr http://localhost:7878 --allow google:alex@gmail.com
  • Lidarr: hle tunnel create lidarr http://localhost:8686 --allow google:alex@gmail.com
  • Readarr: hle tunnel create readarr http://localhost:8787 --allow google:alex@gmail.com
  • Prowlarr: hle tunnel create prowlarr http://localhost:9696 --allow google:alex@gmail.com
  • Bazarr: hle tunnel create bazarr http://localhost:6767 --allow google:alex@gmail.com
Sonarr login page reached through an HLE tunnelRadarr login page reached through an HLE tunnelLidarr login page reached through an HLE tunnelReadarr login page reached through an HLE tunnelProwlarr login page reached through an HLE tunnelBazarr login page reached through an HLE tunnel

🖼️ PhotoPrism

Section titled “🖼️ PhotoPrism”

Self-hosted photo gallery.

PhotoPrism login page reached through an HLE tunnel

Terminal window
hle tunnel create photos http://localhost:2342 --allow google:alex@gmail.com

Community reported

Section titled “Community reported”
Services people have reported working (not tested by us)

Home Automation

  • Node-RED: hle tunnel create nodered http://localhost:1880 --websocket --allow alex@gmail.com
  • openHAB: hle tunnel create openhab http://localhost:8080
  • Domoticz: hle tunnel create domoticz http://localhost:8080
  • Zigbee2MQTT: hle tunnel create z2m http://localhost:8080 --websocket

Media & Entertainment

  • Plex: hle tunnel create plex http://localhost:32400
    • Remote access: set Custom server access URLs in Plex > Settings > Network to your tunnel URL and disable “Remote Access”: hle tunnel create plex http://localhost:32400 --allow google:alex@gmail.com --allow google:partner@gmail.com
  • Emby: hle tunnel create emby http://localhost:8096
  • Navidrome: hle tunnel create music http://localhost:4533
  • Calibre-Web: hle tunnel create books http://localhost:8083
  • Overseerr: hle tunnel create overseerr http://localhost:5055

Development & DevOps

  • n8n: hle tunnel create n8n http://localhost:5678 --websocket
  • Gitea: hle tunnel create git http://localhost:3000
    • Webhooks: set the ROOT_URL in app.ini to your tunnel URL: hle tunnel create git http://localhost:3000 --websocket --allow google:alex@gmail.com
  • Portainer: hle tunnel create portainer http://localhost:9000 --allow alex@gmail.com
  • Uptime Kuma: hle tunnel create status http://localhost:3001 --websocket
  • Code Server / VS Code: hle tunnel create code http://localhost:8080 --websocket --allow google:alex@gmail.com
  • Prometheus: hle tunnel create prom http://localhost:9090

Networking & Security

  • Pi-hole: hle tunnel create pihole http://localhost:80
  • AdGuard Home: hle tunnel create adguard http://localhost:3000
  • WireGuard UI: hle tunnel create wg http://localhost:51821
  • Nginx Proxy Manager: hle tunnel create npm http://localhost:81

Productivity & Files

  • Paperless-ngx: hle tunnel create docs http://localhost:8000
  • Bookstack: hle tunnel create wiki http://localhost:6875
  • Mealie: hle tunnel create recipes http://localhost:9925
  • Actual Budget: hle tunnel create budget http://localhost:5006

NAS & Storage

  • OpenMediaVault: hle tunnel create omv http://localhost:80

Home Network

  • pfSense / OPNsense: hle tunnel create firewall https://localhost:443
  • UniFi Controller: hle tunnel create unifi https://localhost:8443

Advanced Integrations

  • Syncthing: hle tunnel create sync http://localhost:8384 --allow google:alex@gmail.com
    • Setup: binds to 127.0.0.1 by default, so no extra config; the GUI needs CSRF tokens, so use the same browser session.
  • ESPHome Dashboard: hle tunnel create esphome http://localhost:6052 --websocket --allow google:alex@gmail.com
  • Ollama + Open WebUI: hle tunnel create ai http://localhost:3000 --websocket --allow google:alex@gmail.com
    • Setup: keep the Ollama API (11434) local and only expose the web UI.