# Configuration

Configure the local controller address and the installation-specific credentials supplied for your system. Credentials stay inside the app and are never passed to the Home Assistant integration.

For local certificates, `fingerprint` mode requires the expected SHA-256 certificate fingerprint. A certificate change is rejected. `system_ca` uses the standard trust store, while `custom_ca` is reserved for a separately provided local certificate authority.

The bridge API is intended for the internal Home Assistant network and is not exposed on a host port by default.

When running under Home Assistant Supervisor, the app advertises and registers
the local Bridge API through Supervisor discovery. The runtime-provided internal
host name and the dedicated local bridge token are sent only to Supervisor. The
integration asks for confirmation before creating a config entry.