In my search I found some threads that sounded like this issue, but they were trying to connect to the api. Still maybe related, but the topic moved and they are old, so I started this one.
I can connect from outside to HA (https://xxxx.duckdns.org:8123) but the same URL on a browser on the local does not.
When I was trying to get SSL working there was a post that mention ports 8123 and 108123 and why. I wonder if that has something to do with my issue, but I can’t find it now.
It may be hard to make out the columns for the port forwarding, 443 is linked to 443 and 8123 is linked to 8123.
Not sure if it is related. I am on hass.io, and used the add-on installer to install duckdns and letsencrypt. As part of getting HTTPS up, I read if you have duckdns on hass.io do not install letsencrypt, so I shut down it’s service. Did I mess something up doing that?
Server Name External Port Start External Port End Protocol Internal Port Start Internal Port End Server IP Address WAN Interface Remove
Home Automation SSL 443 443 TCP 443 443 192.168.1.160 veip0.1
Home Automation SSL 8123 8123 TCP 8123 8123 192.168.1.160 veip0.1
It sounds to me like your router is not redirecting to the external address. I have seen this issue, please try to connect to: https://local ip address:8123. You may get a cert error since the cert is not registered to the ip address, but you should be able to add an exception to your browser and it will work. The other option is a static route to the outside world in your router.
@doubleUS thanks for the term, that sound like it . I have an Adtran 424rg, I need to ask them . I don’t remember seeing anything like that .
I will report back when I have something .
I had the same issue and my crappy isp provided router barely lets me login let alone make a lot of changes. I just put an entry in my host file to access internally.
that pointed homeassistant.local back to the IP directly works no problem for me.
My work provided laptop blocks anything going to duckdns anyway so this also get me around that when I am at home.
I got to check when I get home but I think my android phone on wifi works internally as a side note. I use the same icon for internal and ext. Glad your working I fought with that for a bit before saying screw it and doing a host file.
Now that you say that, I don’t think mine did work last night. I will have to retry it.
Time to google to see if Android has a host conf that un-rooted can get to. I doubt it very seriously.
We are currently porting some Win CE apps to an Android at work. It has been a transitions to how sandbox Android OS is.
I just checked my router actually does have nat loopback that is why my Android phone can can use my duckdns address. now thinking back I had to host file it to get around my works restrictions on Duckdns :). But glad it worked for you as well.
Tested phone and it does not work. If I turn off WIFI, let it switch to cell, then it does. Looking at my router if does not support NAT Loopback.
I got confused for a second, I was getting a log on page. I started wondering if the page was cache, so after some searching I found the only way to clear is use a incognito tab. Then I got a connect refused message. Short of a rooted phone, there is no fixed. This worries me when I try to mess with tablets since they are Andriod.
What about an internal dns server? that you can create a manual entry in. Doesn’t HA have a dns addon that you can turn into your internal dns. I think it does but never used it. Might inject a bit of slowness resolving external though. But might get around the lack of loopback nat and would eliminate host files.
Nginx Proxy
Nginx proxy with multiple vhosts and optional ssl Certbot
Ssl certificate creation/renewal with let’s encrypt
Using these instead of the built in version let you specify a list host. So my.ddns.net 443 and 80 gets proxy to 8123. That leaves 8123 open for local access. The Certbot builds certs from a list of domains and puts one in each directory that you specify in the Nginx configurations.
I think you can actually let it authenticate with a name and password. Just starting to play with that.
Also, if i read it right, you can proxy to a different IP.
Ok I am not familiar with hass.io, because I am running HA on a ubuntu machine, but there is no need to set up different ways of access from internal and external networks.
In my understanding nginx proxying is used for “hiding” 8123 port (or what ever port your HA instance is using), this gives a little extra security, against hacking your HA instance, because for first look you can not determine what is running on port 443, but if you open up port 8123 to the whole world, then it is obvious that you are running HA.
Also with geoip rules you can configure nginx to allow certain countries only.
But first of all and most importantly you should read up on DNS name resolution and/or bind9 …
Sorry for making this a zombie thread, but I am having the exact same issue. Did you ever figure out how to get homeassistant.local to resolve to your home assistant’s local IP after setting up the dnsmasq add-on?