Using WG Tunnel with Home Assistant

[fencepost-error]

Some notes on setting up WG Tunnel with Home Assistant so you can access your HA setup directly without having to go via HA Cloud/Nabu Casa. This runs an on-demand tunnel when you run the HA app, the process involved a bit of trial and error so I may have missed some steps when reconstructing it for this writeup.

Add a tunnel to your server, say it's called XYZ.

For Auto-tunnelling enable mobile data and untrusted WiFi if required. Add any trusted WiFi names for your local WiFi where you don't need a tunnel.

For the XYZ tunnel, make it the primary tunnel, and for Split Tunnelling enable the HA app and nothing else. There's another set of Auto-tunnel settings here which don't overlap with the ones under Auto-tunnelling, enabled mobile data doesn't seem to change anything and there's no option for untrusted WiFi so I assume the Auto-tunnelling settings take precedent.

That should be all. The one annoying thing is that while testing it started the VPN tunnel on-demand when I fired up the HA app, but now it's not doing it any more, so either it was a coincidence (although one that worked several times in a row) or some setting change has disabled this, and you need to start it explicitly via the WG Tunnel app.