I am just starting with HA so apologies for my lack of understanding in advance… I am not sure what I am doing wrong but it seems that on my HA/Lovelace running under http I am not able to render any iframe’s URL using https - I can render http without any issue (tried few random pages both http and https).
Do I need to have HA running under https ? There is a warning saying ‘You can’t embed sites using HTTP if you are using HTTPS for your Home Assistant.’ but nothing about my scenario…
I have also tried to switch to https using steps provided in manual (https://www.home-assistant.io/docs/ecosystem/certificates/tls_self_signed_certificate/) but I have no luck here - I am able to connect to port fine but all browsers are throwing up all sorts of SSL errors - error depends on browser used but I the cert is probably not working as I cannot even see it in say Chrome in order to add/install it locally. Saying this I am able to verify it using openssl command and it seems ok there…
I am running HA using python’s virtual environment on raspbian.
If you are only accessing your HA server locally (not over the internet) and trust the people who connect to your local network and think that the likelihood of wifi hacking in your area is low, then no you probably don’t need it.
The easiest way to install certs for ssl is to instal the lets encrypt OR duckDNS addon (not both!). Assuming you are running Hassio. I need to finish reading posts before replying.
I would assume the reveres of the http warning is true (i.e. you need to be running https HA to view https iFrames) but I do not know for sure.
fair enough… any advice on how to configure https or if the instructions on the site are correct? HA will be accessed only from local network thus there is no need for proxy/forwarding/duckdns etc.
I have followed the steps, got key and cert files and added ssl_certificate/ssl_key only to http: section of config file. Service has been restarted.