Everything Local

You can, but it’s too tricky for the benefits.
What you should do:

  • Remove SSL in HA itself
  • Use a reverse proxy for external access through SSL (e.g. the nginx proxy manager addon)