Use Encrypted OTA Updates Across ESPHome Devices

automations.yaml

@@ -70,8 +70,9 @@
     action: light.turn_off
   mode: single
 - id: '1623673821789'
-  alias: Gute Nacht!
-  description: Schalte alles (außer Schlafzimmer) aus, sobald das Schlaftracking startet.
+  alias: Schlafen gehen
+  description: Schalte alles (außer Schlafzimmer) aus und schließ die Wohnungstür,
+    sobald das Schlaftracking startet.
   triggers:
   - trigger: state
     entity_id:
@@ -95,6 +96,11 @@
     device_id: 6d1be741876624a70ab5b01b54c6fd6f
     entity_id: switch.kuche_musik
     domain: switch
+  - action: lock.lock
+    metadata: {}
+    target:
+      entity_id: lock.flur_wohnungstur
+    data: {}
   - data:
       message: Gute Nacht!
     action: notify.mobile_app_le2123
@@ -251,7 +257,7 @@
     action: tts.speak
   mode: single
 - id: '1623954512941'
-  alias: Licht im Schlafzimmer zum Aufwachen einschalten
+  alias: Aufwachen
   description: Nach der Alarmquittierung
   triggers:
   - trigger: state
@@ -273,6 +279,11 @@
       device_id: 68868390eda35e969ec60a13020f2407
     data: {}
     action: light.turn_on
+  - action: lock.unlock
+    metadata: {}
+    target:
+      entity_id: lock.flur_wohnungstur
+    data: {}
   mode: single
 - id: '1624820688449'
   alias: 'Anruf: Beim Klingeln grün blinken'
@@ -439,7 +450,7 @@
     action: light.turn_on
   mode: single
 - id: '1630914505161'
-  alias: Beim Verlassen der Wohnung alles abschalten
+  alias: Wohnung verlassen
   description: ''
   triggers:
   - entity_id: person.marcus_scholz
@@ -475,6 +486,11 @@
       device_id:
       - 231cd7ec37e32690faf126105b03ee02
       - a6d24e7d93c114723bf525e9eac1c2df
+  - action: lock.lock
+    metadata: {}
+    target:
+      entity_id: lock.flur_wohnungstur
+    data: {}
   - type: turn_off
     device_id: c4ead7f6227e2ee4c43c4b0df829cd84
     entity_id: 7f7284b11f2bf50ae2f0ebeeb35411c0
@@ -1438,7 +1454,6 @@
         device_id: 6d1be741876624a70ab5b01b54c6fd6f
         entity_id: 621e4377a089b7f5d92c7c9f2cc171a1
         domain: switch
-
 - id: epaper_daily_demotivational_quote
   alias: Epaper tägliches Demotivationszitat
   description: Wählt täglich ein festes Zitat aus der lokalen Zitatbibliothek aus.
@@ -1446,14 +1461,33 @@
   - trigger: homeassistant
     event: start
   - trigger: time
-      at: "00:00:00"
+    at: 00:00:00
   conditions: []
   actions:
   - action: input_select.select_option
     target:
       entity_id: input_select.epaper_demotivationszitat
     data:
-        option: >-
-          {% set quotes = state_attr('input_select.epaper_demotivationszitat', 'options') %}
-          {{ quotes[(now().strftime('%j') | int - 1) % (quotes | count)] }}
+      option: '{% set quotes = state_attr(''input_select.epaper_demotivationszitat'',
+        ''options'') %} {{ quotes[(now().strftime(''%j'') | int - 1) % (quotes | count)]
+        }}'
+  mode: single
+- id: '1785863986502'
+  alias: SmartMirror neu laden
+  description: ''
+  triggers:
+  - trigger: time
+    at: 00:00:10
+  conditions: []
+  actions:
+  - action: button.press
+    metadata: {}
+    target:
+      entity_id: button.touchkio_smartmirror_refresh
+    data: {}
+  - action: button.press
+    metadata: {}
+    target:
+      entity_id: button.touchkio_raspberrypi_refresh
+    data: {}
   mode: single

configuration.yaml

@@ -1,12 +1,6 @@
 # Configure a default setup of Home Assistant (frontend, api, etc)
 default_config:
 
-# Enable SSL/TLS
-http:
-  server_port: 443
-  ssl_certificate: /ssl/fullchain.pem
-  ssl_key: /ssl/privkey.pem
-
 # Text to speech
 tts:
   - platform: picotts_remote
@@ -91,5 +85,3 @@ frontend:
 
 freedns:
   url: !secret freedns6_url
-#  - name: IPv4
-#    url: !secret freedns4_url

esphome/archive/atorch-ble-proxy.yaml

@@ -4,7 +4,7 @@ substitutions:
   external_components_source: github://syssi/esphome-atorch-dl24@main
   dl24_mac_address: !secret dl24_mac_address
   project_version: 2.1.0
-  device_description: "Monitor and control a Atorch meter via bluetooth BLE"
+  device_description: "ESP32-S3 BLE client to monitor and control an Atorch DL24 programmable DC load"
 
 esphome:
   name: ${name}
@@ -36,7 +36,7 @@ api:
 # Enable over-the-air updates
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 network:
   enable_ipv6: true

esphome/archive/aussensensor.yaml

@@ -1,10 +1,12 @@
 substitutions:
   name: "aussensensor"
   friendly_name: "Außensensor"
+  device_description: "NodeMCU-32S outdoor temperature and humidity sensor using a DHT22"
 
 esphome:
   name: ${name}
   friendly_name: ${friendly_name}
+  comment: ${device_description}
   name_add_mac_suffix: false
   project:
     name: sensor.outdoor
@@ -40,7 +42,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # DHT22 sensor
 sensor:

esphome/archive/owon-b35t-m5stack-core1.yaml

@@ -31,7 +31,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 wifi:
   ssid: "Voltage-legacy"

esphome/archive/owon-b35t-m5stack-core2.yaml

@@ -46,7 +46,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 wifi:
   ssid: "Voltage-legacy"

esphome/archive/raspiaudio-muse-luxe.yaml

@@ -3,6 +3,7 @@
 substitutions:
   name: "raspiaudio-muse-luxe"
   friendly_name: "RaspiAudio Muse Luxe"
+  device_description: "RaspiAudio Muse Luxe ESP32 voice assistant and media player with local wake-word detection, ES8388 audio codec and battery monitoring"
 #States  
   P_starting: "0"
   P_waiting: "1"
@@ -18,7 +19,7 @@ api:
 ota:
   - platform: esphome
     id: ota_esphome
-    password: !secret ota
+    encryption:
 
 external_components:
     - source: github://RASPIAUDIO/esphomeLuxe@main
@@ -43,6 +44,7 @@ wifi:
 esphome:
   name: ${name}
   friendly_name: ${friendly_name}
+  comment: ${device_description}
   min_version: 2025.2.0
   name_add_mac_suffix: false
   platformio_options:

esphome/archive/sleepingroom.yaml

@@ -1,10 +1,12 @@
 substitutions:
   name: "sleepingroom"
   friendly_name: "Luftqualität Schlafzimmer"
+  device_description: "NodeMCU-32S bedroom air-quality monitor with SCD30 CO2, temperature and humidity, PM1006 particulate sensing, RGB status LED and IR receiver/transmitter"
 
 esphome:
   name: ${name}
   friendly_name: ${friendly_name}
+  comment: ${device_description}
   name_add_mac_suffix: false
   project:
     name: sensor.${name}
@@ -80,7 +82,7 @@ api:
 # Enable over-the-air updates
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

esphome/badezimmer-luft.yaml

@@ -1,8 +1,10 @@
 substitutions:
+  device_description: "ESP32-C3 bathroom temperature and humidity monitor with DHT22 and SHT3x sensors"
   name: "bathroom"
   friendly_name: "Bad"
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -44,7 +46,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

esphome/energymonitor.yaml

@@ -1,10 +1,12 @@
 substitutions:
+  device_description: "M5Stack Core energy dashboard for Home Assistant grid, solar and consumer usage, with analog/digital clock and WireGuard"
   name: "energymonitor"
   friendly_name: "Energy Monitor"
   grid_power_gauge_max_w: "5000.0"
   balcony_solar_gauge_max_w: "800.0"
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -81,7 +83,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 spi:
   clk_pin: GPIO18

esphome/epaperframe.yaml

@@ -1,11 +1,13 @@
 # Device identity shared by ESPHome and Home Assistant.
 substitutions:
+  device_description: "ESP32 e-paper Home Assistant dashboard for indoor climate, energy and calendar events, with button-controlled pages"
   name: epaperframe
   friendly_name: "Info-Dashboard"
 
 # Startup selects the default page only after Home Assistant has had time to
 # provide the sensor states needed by its display lambda.
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -65,7 +67,7 @@ globals:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Power key of li-ion charger
 output:

esphome/geigercounter.yaml

@@ -1,8 +1,10 @@
 substitutions:
+  device_description: "ESP32 Geiger counter with radiation dose rate, accumulated dose and MAX7219 seven-segment display"
   name: "geigercounter"
   friendly_name: "Geigerzähler"
   
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -44,7 +46,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 spi:
   clk_pin: 18

esphome/home-assistant-voice-09c0e7.yaml

@@ -1,9 +1,11 @@
 substitutions:
+  device_description: "Home Assistant Voice PE voice assistant with microphone and speaker."
   name: home-assistant-voice-09c0e7
   friendly_name: Home Assistant Voice Küche
 packages:
   Nabu Casa.Home Assistant Voice PE: github://esphome/home-assistant-voice-pe/home-assistant-voice.yaml
 esphome:
+  comment: ${device_description}
   name: ${name}
   name_add_mac_suffix: false
   friendly_name: ${friendly_name}
@@ -28,7 +30,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 http_request:
 

esphome/home-assistant-voice-0a7c6b.yaml

@@ -1,9 +1,11 @@
 substitutions:
+  device_description: "Home Assistant Voice PE voice assistant with microphone and speaker."
   name: home-assistant-voice-0a7c6b
   friendly_name: Home Assistant Voice Wohnzimmer
 packages:
   Nabu Casa.Home Assistant Voice PE: github://esphome/home-assistant-voice-pe/home-assistant-voice.yaml
 esphome:
+  comment: ${device_description}
   name: ${name}
   name_add_mac_suffix: false
   friendly_name: ${friendly_name}
@@ -28,7 +30,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 http_request:
 

esphome/kamera-balkon.yaml

@@ -1,8 +1,10 @@
 substitutions:
   name: kamera-balkon
   friendly_name: Kamera Balkon
+  device_description: "Balcony ESP32-CAM with HTTP stream and snapshots, flash LED, and SHT3x temperature and humidity sensing."
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -43,7 +45,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

esphome/kamera-wohnzimmer.yaml

@@ -1,8 +1,10 @@
 substitutions:
   name: kamera-wohnzimmer
   friendly_name: Kamera Wohnzimmer
+  device_description: "Living-room ESP32 camera with HTTP stream and snapshots and a controllable flash LED."
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -43,7 +45,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

esphome/lab-ble-proxy.yaml

@@ -67,7 +67,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 network:
   enable_ipv6: true

esphome/livingroom.yaml

@@ -1,8 +1,10 @@
 substitutions:
+  device_description: "ESP32 living-room air quality monitor with SCD30 CO2, temperature and humidity, PM2.5 sensing and RGB status LED"
   name: "livingroom"
   friendly_name: "Luftqualität Wohnzimmer"
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -86,7 +88,7 @@ api:
 # Enable over-the-air updates
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

esphome/m5stack-atom-echo.yaml

@@ -3,8 +3,10 @@
 substitutions:
   name: m5stack-atom-echo
   friendly_name: M5Stack Atom Echo
+  device_description: "M5Stack Atom Echo ESP32 voice assistant with on-device or Home Assistant wake-word detection and timer announcements."
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   name_add_mac_suffix: false
   friendly_name: ${friendly_name}
@@ -26,7 +28,7 @@ api:
 ota:
   - platform: esphome
     id: ota_esphome
-    password: !secret ota
+    encryption:
 
 network:
   enable_ipv6: true
@@ -232,7 +234,7 @@ light:
     default_transition_length: 0s
     chipset: SK6812
     num_leds: 1
-    rgb_order: grb
+    channel_colors: GRB
     effects:
       - pulse:
           name: "Slow Pulse"

esphome/riden-labornetzteil-18a.yaml

@@ -91,7 +91,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Enable status LED
 status_led:

esphome/riden-labornetzteil-6a.yaml

@@ -91,7 +91,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Enable status LED
 status_led:

esphome/serverroom.yaml

@@ -1,8 +1,10 @@
 substitutions:
+  device_description: "ESP32-C3 server-room temperature and atmospheric pressure monitor with BMP280 sensor"
   name: "serverroom"
   friendly_name: "Serverraum Luft"
 
 esphome:
+  comment: ${device_description}
   name: ${name}
   friendly_name: ${friendly_name}
   name_add_mac_suffix: false
@@ -44,7 +46,7 @@ api:
 
 ota:
   platform: esphome
-  password: !secret ota
+  encryption:
 
 # Initialize I²C
 i2c:

sensors.yaml

@@ -11,7 +11,8 @@
     host: !secret router_ip
     community: !secret router_community
 #    baseoid: .1.3.6.1.2.1.31.1.1.1.6.511
-    baseoid: .1.3.6.1.2.1.2.2.1.10.12
+#    baseoid: .1.3.6.1.2.1.2.2.1.10.12
+    baseoid: .1.3.6.1.2.1.31.1.1.1.6.12 # IF-MIB::ifHCInOctets.12
     version: 2c
     unit_of_measurement: "Octets"
   - platform: snmp
@@ -20,7 +21,8 @@
     host: !secret router_ip
     community: !secret router_community
 #    baseoid: .1.3.6.1.2.1.31.1.1.1.10.511
-    baseoid: .1.3.6.1.2.1.2.2.1.16.12
+#    baseoid: .1.3.6.1.2.1.2.2.1.16.12
+    baseoid: .1.3.6.1.2.1.31.1.1.1.10.12 # IF-MIB::ifHCOutOctets.12
     version: 2c
     unit_of_measurement: "Octets"
 

template.yaml

@@ -78,7 +78,8 @@
         {% set waschmaschine = states('sensor.waschmaschine_leistung') | float %}
         {% set arcade = states('sensor.arcade_automat_leistung') | float %}
         {% set spuelmaschine = states('sensor.spulmaschine_leistung') | float %}
-        {{ (total + solar - raumduft - keller - musik - bett - heimkino_sz - deko - schreibtisch - serverraum - heimkino_wz - spieleschrank - kuehlschrank - kaffeemaschine - waeschetrockner - waschmaschine - arcade - spuelmaschine) | round(1) }}
+        {% set mikrowelle = states('sensor.waschetrockner_leistung') | float %}
+        {{ (total + solar - raumduft - keller - musik - bett - heimkino_sz - deko - schreibtisch - serverraum - heimkino_wz - spieleschrank - kuehlschrank - kaffeemaschine - waeschetrockner - waschmaschine - arcade - spuelmaschine - mikrowelle) | round(1) }}
       device_class: power
       state_class: measurement
       attributes: