# Losing config node data overnight

**URL:** <https://discourse.nodered.org/t/losing-config-node-data-overnight/84312>\
**Category:** General\
**Tags:** docker, home-assistant\
**Created:** [5 January 2024 09:56 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312 "2024-01-05T09:56:58Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![JasonBSteele](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jasonbsteele/32/21181_2.png) [@JasonBSteele](https://discourse.nodered.org/u/JasonBSteele)\
**Post date:** [5 January 2024 09:56 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/1 "2024-01-05T09:56:58Z")

</div>

Hi,

I have NR running in docker on a Synology NAS. I use it with Home Assistant and a config node has the URL and key to connect.

This has been working fine for a long time, but for the last few days (perhaps the start of the year?) I am finding that connection to Home Assistant has been lost overnight.

The NR log shows that something seems to happen around 2024/01/04 22:30 and 2024/01/03 23:22 where the flows are Stopped, Updated and then Started followed by errors saying that "No credentials provided" and "Server config node not found"

In the morning I update the config again and it works fine for the rest of the day. I updated the HomeAssistant integration yesterday in the hope that that would resolve the issue but it didn't.

I am on version v3.1.3 of NR, 0.62.2 of node-red-contrib-home-assistant-websocket, v3.1.2 of the Home Assistant Node-RED Companion.

I do have Watchtower updating mu docker components but that only runs on a Friday night, and it hasn't lost config in the past.

I have attached my log:  
[nodered.csv.txt](https://discourse.nodered.org/uploads/short-url/sqf5q3ZjQK7Qc3qfRdaQrJOOQ8r.txt) (141.5 KB)

Any ideas on what could be causing this?

---

<div class="post-metadata">

**Author:** ![GogoVega](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gogovega/32/71313_2.png) [@GogoVega](https://discourse.nodered.org/u/GogoVega)\
**Post date:** [5 January 2024 10:21 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/2 "2024-01-05T10:21:47Z")

</div>

Hi,

Is your NR open to the Web? It looks like an intrusion.  
Have you checked what your flows.json file contains?  
Read this thread urgently:

> [@Nodered hacked by adding invisible nodes](https://discourse.nodered.org/t/nodered-hacked-by-adding-invisible-nodes/83860/96):
>
> Then at least disable the API if the editor is disabled per default and allow to override/change this behaviour through settings.

---

<div class="post-metadata">

**Author:** ![JasonBSteele](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jasonbsteele/32/21181_2.png) [@JasonBSteele](https://discourse.nodered.org/u/JasonBSteele)\
**Post date:** [5 January 2024 12:03 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/3 "2024-01-05T12:03:46Z")

</div>

> [@GogoVega](#):
>
> Is your NR open to the Web? It looks like an intrusion.  
> Have you checked what your flows.json file contains?

Hi, thanks for getting back to me. I had a good look through flows.json and didn't find anything suspicious - no hidden nodes executing code, all the nodes in there were ones I had added. I also checked /dev and /dev/shm for unusual files.

I am not exposing NR to the internet, but other services on the NAS are.

So, hopefully not a hack.

---

<div class="post-metadata">

**Author:** ![GogoVega](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gogovega/32/71313_2.png) [@GogoVega](https://discourse.nodered.org/u/GogoVega)\
**Post date:** [5 January 2024 13:05 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/4 "2024-01-05T13:05:55Z")

</div>

Your flow is not supposed to deploy itself - it can if you call the api (from a node), is that the case?

If not, a contrib node or someone did it

---

<div class="post-metadata">

**Author:** ![JasonBSteele](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jasonbsteele/32/21181_2.png) [@JasonBSteele](https://discourse.nodered.org/u/JasonBSteele)\
**Post date:** [5 January 2024 13:29 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/5 "2024-01-05T13:29:26Z")

</div>

No, I don't anything like that, but I guess it's possible that the Home Assistant integration is doing something it shouldn't. I'll cross post in their forums to see if anyone has come across this.

Regarding the "flow deploying itself". I assume you are referring to these parts of the log where it looks like they are stopped, updated and restarted:

```auto
stdout,3 Jan 23:22:20 - [error] [server:8543beb1656653ec] Error: No credentials provided
2024/01/03 23:22:20,stdout,3 Jan 23:22:20 - [info] Starting flows
2024/01/03 23:22:20,stdout,3 Jan 23:22:20 - [info] Updated flows
2024/01/03 23:22:20,stdout,3 Jan 23:22:20 - [info] Stopped flows
2024/01/03 23:22:20,stdout,3 Jan 23:22:20 - [info] Stopping flows
2024/01/03 23:22:15,stdout,3 Jan 23:22:15 - [info] Started flows
2024/01/03 23:22:15,stdout,3 Jan 23:22:15 - [info] Starting flows
2024/01/03 23:22:15,stdout,3 Jan 23:22:15 - [info] Updated flows
2024/01/03 23:22:15,stdout,3 Jan 23:22:15 - [info] Stopped flows
2024/01/03 23:22:15,stdout,3 Jan 23:22:15 - [info] Stopping flows

```

Yes, at this time of night I wouldn't have been doing that so it is concerning.

---

<div class="post-metadata">

**Author:** ![GogoVega](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/gogovega/32/71313_2.png) [@GogoVega](https://discourse.nodered.org/u/GogoVega)\
**Post date:** [5 January 2024 13:35 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/6 "2024-01-05T13:35:12Z")

</div>

> [@JasonBSteele](#):
>
> I assume you are referring to these parts

Yes

> [@JasonBSteele](#):
>
> I wouldn't have been doing that so it is concerning.

I fear there has been an intrusion by something other than NR 😬

---

<div class="post-metadata">

**Author:** ![JasonBSteele](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/jasonbsteele/32/21181_2.png) [@JasonBSteele](https://discourse.nodered.org/u/JasonBSteele)\
**Post date:** [6 January 2024 11:42 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/7 "2024-01-06T11:42:32Z")

</div>

Well it didn't happen last night. HA was automatically updated at 03:00. Hopefully the issue has just gone away! 🤷‍♂️

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\
**Post date:** [6 March 2024 11:43 UTC](https://discourse.nodered.org/t/losing-config-node-data-overnight/84312/8 "2024-03-06T11:43:25Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.