HA server ssl

My issue are as follows:

  • I’ve installed a lets encrypt certificate pointing to the cloudflare tunnel for remote access. This works great and the data is secure and encrypted.
    Mu HA server though is not secure, which means there are certain items not accessible. For example, the webpage items on the dashboard (grafana charts) cannot be shown as I get the following error message on this cards:

003

When I access my HA server with https://homeassistant.local:8123/ I get the certificate error that the certificate points to the domain name on Cloudflare and not to homeassistant.local.

I don’t know how to fix this and request information and steps on how to resolve this please.

Thank you in advance!

You can’t.
If you reach HA in https, even through cloudflare, everything in an iframe, like your grafana, must run in https as well.

That is what don’t know h

This is what I don’t know how to do. How to make the HA sever run in https. Any help will be appreciated.

It’s not a matter of “running in https”, it’s a matter of how you access HA.
The “Unable to load” message tells you access HA in https somehow. In your config, you have an iframe pointing to grafana in plain http, hence the error message.

Can you let me in on the process on how to access HA in https?
I have the certificates in /ssl pointing to the cloudflare tunnel, this is secure, but homeassistant.local is not.
004

You can only have one set of certificate. It’s or your current letsencrypt certificates using your cloudlare name, or a self-made certificate you would create for homeassistant.local (not advisable) .

To fix your issue, you should:

  • always use you cloudflare tunnel for HA
  • add a tunnel for your grafana, also using https
  • point your iframes to grafana in https, i.e. via cloudflare.

Thank you very much. I’m sorted now.

Can you share steps on how you fixed it?

Because I only access my HA true CH tunnel but my Grafana does not work at all true tunnel.
I get this error: If you’re seeing this Grafana has failed to load its application files

I only access the server through ssl tunnel, log in, go to grafana and then go back to overview which fixes my problem to view charts.

For some reason that does not work for me. I managed to get it working by creating subdomain pointed to same tunnel and then used NGINX reverse proxy to route that subdomain to HA.