Ability to modify the user-agent or include custom headers to implement security measures for filtering unauthorized clients.

[dstasiuk]

Since my Home Assistant instance is accessible worldwide, I want to enhance its security by enabling filtering and blocking of unknown users. Currently, I'm using Cloudflare, which allows request filtering based on custom headers and their values or user agent strings. By setting unique values in these fields, I can add an extra layer of security to prevent unauthorized access to my Home Assistant and support other security measures.

I propose adding an option in the IOS/android app’s configuration to allow customization of the user agent or insertion of custom headers to requests. This would enable filtering of clients when accessing Home Assistant, either through external tools like Cloudflare or potentially even within Home Assistant itself in the future.