Can't access Grafana over SSL

Configuration
1

Hi,

I’m successfully using DuckDNS and Let’s Encryt to access HA. I have installed the Grafana addon and set it up this way:

{
  "log_level": "info",
  "ssl": true,
  "certfile": "fullchain.pem",
  "keyfile": "privkey.pem",
  "plugins": [],
  "env_vars": []
}

However, I can access Grafana on:

https://mysubdomain.duckdns.org:3000

It does work on:

http://mysubdomain.duckdns.org:3000

Any ideas?

I’ve been reading a lot and I’ve checked fullchaim.pem and privkey.pem are stores on the default /ssl/ folder.

Thanks!

2

Silly question: Have you forwarded port 3000 on your router

3

Yes, port 3000 is forwarded. If not, http: wouldn’t work either. Thanks!

4

he he good point.
Now I wonder if you can actually have https and a port together. Think you’d need to forward port 443 to your grafana server on port 3000
I’ll be honest I had never set up SSL before HA, and I followed this tutorial:

In there it clearly shows a port forward from 443 to 8123.
Could this be the reason?

5

Did you restart the add-on after changing the configuration? What does your logs show etc?

6

Also done. 443 forwards to 8123. Thanks

7

I think that’s your issue right there, 443 goes to 8123 so it can’t go to 3000?

8

Yes, several times. The only line that refers to https is this:

t=2018-08-08T09:57:17+0200 lvl=info msg="HTTP Server Listen" logger=http.server address=0.0.0.0:3000 protocol=https subUrl= socket=

Thanks!

9

That makes sense, but so… how can I use different ports over SSL? Thanks!

10

Not sure that’s possible, there may be a way using a reverse proxy like nginx but I’ve not “toyed” with that yet.
Try and see if you can find tutorials on how to use it, and if it works, be sure to post here how you did it, I’d also be interested to know how you achieved it :slight_smile:
Slightly different approach, why do you want to open another port to access Grafana, why don’t you get the graphs directly integrated into HA?
This will show you how:

11

Thank you. I get the point now. I’ll look for a different approach. I might drop SSL, since I just use it so Google Home can talk to Hassio. But I want to use several addons that need access through different ports.

12

Well, I have no idea what I did, but it does work:

https://monosnap.com/direct/M6CzwXxmRykBrnw1SJTRVznzUBoDBJ

13

Wow…I’m having the same issue as you but it looks like you not only found a solution to make it work but you also have panel iframes working over SSL. Wish you knew what you did… :slight_smile:

14

I’ll share my exact config once I get back home. I’m on holidays! :slight_smile:

15

Awesome…thanks

16

Hi @MarceCastro! Any chance you can share your config with us? I’m also having trouble accessing Grafana over SSL. Although I want to access it using subfolder instead of subdomain inside a panel iframe (i.e. https://mydomain.duckdns.org/grafana), I’m guessing the config would almost look the same.

Are you using the nginx addon?

Thanks!

17

I’m really sorry! But I had an issue with HA and had to reinstall from scratch. I’m not using Grafana anymore :frowning:

1 Like