I am setup with TLS. I use Let’s Encrypt for free certs.
It works for me all the time. I don’t use nmap since switching to OwnTracks for tracking my location. If I restart HA I sometimes will set myself to home manually (or you can trigger a manual location update in OwnTracks).
Here’s an updated guide I made which was inspired by @mikeg1130 with the new built-in HomeKit support. Note this requires that you have an AppleTV, ipad, or HomePod that will be an “always on your network” device. If you don’t have that, you’re better off with homebridge.