In the Domoticz system preinstalled in the Szélessáv SmartHome firmware, we kept the original first-login credentials.
For the first login, use:
It is very important to change these credentials immediately after the first login.
Because the default username and password are publicly known, leaving them unchanged represents a serious security risk. If someone gains access to the Domoticz interface, they may also be able to control a significant part of the smart home system.
For this reason, we recommend changing both the admin username and password during the first setup.
By default, Domoticz is accessible from the local network. If you want to access the interface directly from the internet, you must create a dedicated rule in the OpenWrt firewall.
This can be configured in the router interface under:
Network → Firewall → Traffic Rules
Important: exposing Domoticz directly to the internet increases the attack surface of the system. If you enable this type of access, always use a secure username, a strong password and, preferably, two-factor authentication.
Click the Add button in the lower-left corner to create a new traffic rule.
Under General Settings, give the new rule a descriptive name, for example:
Domoticz
The Protocol can remain set to TCP and UDP, although the Domoticz web interface itself normally only requires TCP.
Set the Source zone to:
WAN
This represents the external network connection from the internet.
The Source address field can be left empty. In this case, Domoticz will be accessible from any external IP address.
A more secure solution is to specify one or more allowed IP addresses. In that case, the firewall will only permit connections originating from those addresses.
This is often less practical for mobile access, because the public IP address assigned by a mobile network provider may change regularly.
Leave the Source port field empty. There is usually no need to restrict the client-side source port.
The Destination zone setting is particularly important. Set it to:
Device input
In this case, we are not forwarding the connection to another device on the internal network. We want to allow access directly to a service running on the OpenWrt router itself.
Leave the Destination address field empty.
Set the Destination port to:
8080
If the Domoticz port has not been changed, the web interface is available on this port by default.
Set the Action to:
Accept
This allows incoming traffic that matches the conditions defined above.
After configuring the rule, first save the changes.
Important: at this point the new firewall rule may not yet be active.
Use the Save & Apply button at the bottom of the page to activate the new firewall configuration.
After the changes have been applied, the Domoticz interface can be accessed from the internet using the router's external IP address and the configured port.
Direct internet access is convenient, but it also means that the Domoticz login interface becomes reachable from outside your local network.
For this reason, it is especially important to:
A safer way to access Domoticz remotely is to use a VPN connection.
With a VPN, your phone or computer can connect to the home network as if it were physically present there. In this configuration, there is no need to expose the Domoticz interface directly to the internet.
This significantly reduces the possibility of external attackers directly reaching the Domoticz login interface.
If direct internet access is not specifically required, we recommend using a VPN connection for remote access.
