Hi all,
I’m having an issue with the duckdns addon in hassio. I cannot connect to my instance externally without getting a SSL error in the browser.
I have setup duckdns, installed duckdns addon and input my configuration including the token and hostname from duckdns:
lets_encrypt:
accept_terms: true
certfile: fullchain.pem
keyfile: privkey.pem
token: XXXXX-XXXXXX-XXXX-XX
domains:
- MY_DUCK_DNS.duckdns.org
aliases: []
seconds: 300
Here’s the log from DuckDNS addon:
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] done.
[services.d] starting services
[services.d] done.
# INFO: Using main config file /data/workdir/config
+ Generating account key...
+ Registering account key with ACME server...
+ Fetching account ID...
+ Done!
[23:01:25] INFO: OK
MY_IP
NOCHANGE
# INFO: Using main config file /data/workdir/config
+ Creating chain cache directory /data/workdir/chains
Processing MY_DUCK_DNS.duckdns.org
+ Creating new directory /data/letsencrypt/MY_DUCK_DNS.duckdns.org ...
+ Signing domains...
+ Generating private key...
+ Generating signing request...
+ Requesting new certificate order from CA...
+ Received 1 authorizations URLs from the CA
+ Handling authorization for MY_DUCK_DNS.duckdns.org
+ 1 pending challenge(s)
+ Deploying challenge tokens...
OK + Responding to challenge for MY_DUCK_DNS.duckdns.org authorization...
+ Challenge is valid!
+ Cleaning challenge tokens...
OK + Requesting certificate...
+ Checking certificate...
+ Done!
+ Creating fullchain.pem...
+ Done!
[23:06:53] INFO: OK
Forwarded port 443 to 8123 on my router (pfsense), confirmed open using port checker tool
Input my external ip into Configuration - External URL
https://MY_DUCK_DNS.duckdns.org
When attempting to access https://MY_DUCK_DNS.duckdns.org I get the SSL error
I’m not sure what else to do, seems as though the ssl cert is not working?
Any ideas?