DuckDNS/Lets Encrypt Changed Router Problem

Configuration
1

I’ve had HA running a Raspberry Pi 4b for a couple of years now and have a number of add-ons including Duck DNS with Lets Encrypt. With that I used to be able to connect both internally (on the LAN/WiFi) and externally with the url “https://myname.duckdns.org:8123”.

Then, after changing the router that ability was lost. It had to be the router as when I switched back, the ability came back. Unfortunately I had issues of broadband stability with my old router so I have had to replace it with the new one which is rock solid.

Now, since the change, I can still get into HA when away from home using the duckdns url.

But, to get into HA from my LAN/WiFi connected PC or phone I have to use “http://MyIPAddress:8123”. I then get a warning screen come up with an Advanced option which enable me to “Proceed anyway (Unsafe)”, which I can and do. It’s a bit of a pain as I need 2 different shortcuts for HA, Node-Red and Traccar on my mobile devices. I’ve lived with this for about a year now.

I noticed however that my tablet, which rarely goes out, no longer was reporting its stats to the Mobile App integration. I never made the connection with the router change until now. If I stick a sim in it and turn the WiFi off it connects OK and starts reporting. I’ve tried changing the local settings in the tablet’s HA app but just cannot get in and I cannot see any options to “Proceed Anyway”. Same on my phone which I have only just loaded the HA app.

So my question is what can I do to get this all working as it used to with my old router?
Is it just a setting change somewhere or should I uninstall duck dns and re install it? Would that be a pain and mess other stuff up in the process?

Thanks

2

Sounds like NAT loopback (hairpinning) is either not supported or disabled on your new router.

What model router?

3

It’s a TalkTalk Sagecom Fast 5364. I just had a look for anything NAT. The only menus I can see are:-

WiFi Hub
  Device Info
  DHCP
  Light Control
  DNS
  DynDNS
  Route
  Maintenance
Access Control
  Port Forwarding
    Add Rule
    Games & Applications
  Firewall
  DMZ
  User
Internet Connectivity
  Basic (IPv4)

So, nothing NAT like, but I don’t really understand this stuff. I’ve set up some port forwarding and static IPs, but that’s about it.

4

That modem/router does not support NAT loopback.

You’re only other option is to set up a reverse proxy like Caddy or NGINX

5

Or Cloudflare

But I don’t really know whether it will work with internal SSL because cloudflared already creates a SSL certificate for external access.

6

I already have NGINX on my system but not enabled. As I recall, I got it to sort something out (perhaps this very problem) but it didn’t work (can’t remember the symptoms) so just disabled it.

Just tried to Start it and it said I can’t because the Port 443 is already in use.

I think I need a little more help on this one.

7

I don’t know how to progress with NGINX since I cannot even get it running.

On the phone, the HA App in the settings has a "Home Assistant URL set to “https://MyName.duckdns.org:8123/”.

It also has an Internal URL which I have set to “https://myRPi IP address:8213/”. this doesn’t work and I have also tried it without the “s”.

Is there something else I can try?

I also wondered if I could use the old router attached to the LAN in bridge mode or something that would get me round this? I actually have an even older Netgear router doing just that to extend my WiFi into the garage.

8

I can’t help with NGINX, I’ve never used it.

You could forget DuckDNS altogether and sign up for Nabu Casa. It will be more secure, give your mobile connection back and help support Home Assistant.