How can I make home assistant reachable via ssl?

My home assistant is not reachable from the internet directly but i want to make it https reachable since esphome and vaultwarden have issues when it is not a secure site.

What are the options without manual managing certificates ?
Can this be done via lets encrypt ?

I want to use something like home-assistant-test.org that I locally resolve to the ip of my home assistant server

I think LetsEncrypt is only usable if you are connected to the internet. They actually connect to your server and verify it. You can create your own certificate authority (CA) and add its certificate to your devices. Then use it to sign a certificate for the HA server. Unfortunately, I don’t have any links to good HOWTOs on setting up and using a CA.

Hi

Thanks. I know how to do it but I’m hoping some addon could take care of this. I would like to avoid taking care of root certificate, site certificate , renewal, …