OTA: require encryption with the api key, plaintext + password only for migration

allow_plaintext_upload lets the uploader give a device that doesn't encrypt
yet its one migration install. Remove it together with the password once
every device has been updated (the uploader says so).
This commit is contained in:
randy committed 2026-09-30 12:05:39 +02:00
1 parent bb76912023
commit 46cf3b1fe8
2 files changed
+8

No files matched your search

+4
View File
@@ -2,3 +2,7 @@
ota: ota:
- platform: esphome - platform: esphome
password: !secret ota_password password: !secret ota_password
# migration to encrypted OTA (api key): once every device encrypts,
# remove allow_plaintext_upload together with the password
encryption:
allow_plaintext_upload: true
+4
View File
@@ -3,4 +3,8 @@ ota:
- platform: esphome - platform: esphome
id: ota_esphome id: ota_esphome
password: !secret ota_password password: !secret ota_password
# migration to encrypted OTA (api key): once every device encrypts,
# remove allow_plaintext_upload together with the password
encryption:
allow_plaintext_upload: true
allow_partition_access: true allow_partition_access: true