Duck DNS with Let's Encrypt - how to access local with HTTP

Configuration
1

I’ve been searching for a tutorial without success - I can access HA via https but can’t access it local via HTTP. I need the last to be able to use some integrations (e.g. Ecowitt). How do I make it possible to both be possible to access HA via http on my local network and https (duckdns)?

2

The only way to do this is with a reverse proxy like NGINX or Caddy. I don’t know the details but there are plenty of posts on the forum about it. There are reverse proxy addons for HA OS.

Basically it works like this:

Untitled2

Encryption is handled by the reverse proxy, but I’m not sure where the dynamic DNS is managed from.

3

Agree, plenty of posts telling “use NGINX” and I have installed it but don’t know what then to do.

4

Try these instructions:

Or these ones:

5

I have now followed both guides but without luck. I get the local access (without http) but can no longer log in from outside (my duckdns domain). The browser can’t get a secure connection to the server.

Edit: After waiting a small time it works - might be some DDNS that have to be updated. Thanks for the help.

1 Like
6

After got everything working with DuckDNS and can access your HA from outside.

Install Nginx addon in HA

change the config

http:
  use_x_forwarded_for: true 
  trusted_proxies: 
    - 172.30.33.0/24
#   base_url: example.duckdns.org:8123

in nginx setting domain is your duckdns domain, and port 443 (or which ever port you forward from the router to) i forwarded 8123 to 443
note i have to comment out the duck dns one

see if that work

7

I followed below step-by-step:

but getting this:

[17:11:48] INFO: Running nginx...
stat: can't stat '/ssl/fullchain.pem': No such file or directory
[17:11:48] INFO: Service nginx exited with code 1 (by signal 0)
s6-rc: info: service legacy-services: stopping
s6-rc: info: service legacy-services successfully stopped
s6-rc: info: service crond: stopping
[17:11:48] INFO: Service crond exited with code 256 (by signal 15)
s6-rc: info: service crond successfully stopped

There is no step telling how to create ssl/fullchian.pem
Can someone help me on this?