HA Remote Access via Duckdns: Problem

[crsstrb (chris)]

Hello all,

I’m since two days new to the world of HA.
Now I’m trying to set up remote access to my HA via duckdns - unfortunately it doesnt work.

I followed this tutorial: https://www.youtube.com/watch?v=bbPh1QBU1A8&t=1157s

These are the steps I made:

• installed duckdns addon
• made a domain and inserted domain + token in duckdns
• port forwarded in my fritzbox (TCP, port 8123)
• added this to my configuration.yaml:
  http:
  base_url: xxxxxxx.duckdns.org:8123
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem
  cors_allowed_origins:
  - https://google.com
  - https://www.home-assistant.io
  ip_ban_enabled: true
  login_attempts_threshold: 3
• changed (settings → system → network) “lokal network” to https://xxxxx.duckdns.org:8123

My certificate isn’t valid. I also checked via “canyouseeme.org” the port 8123 - there is an error (could not see my service).

What am I doing wrong?
Thanks in adcance
Chris

[sunqan (Anders Sundqvist)]

Sounds like your ISP is using CGNAT.
If the external ip on your router interface is in the
100.64.0.0/10 range it is cgnat (there are variants lika a 10.0.0.0/8 address.
If this is the case, you can’t do it. You have to talk to your isp to see what can be done.
Nabu casa is one option that will work.

[crsstrb (chris)]

Many thanks for your response.
Is there another option without cloud or monthly costs?

[sunqan (Anders Sundqvist)]

As i wote - if cgnat is the problem you have to contact your ISP to see what can be done.

[Canedje]

I think you need to forward incoming 443 in your router to internal IP