Issue seting up NGINX and DuckDNS on Hassio

SoqC · September 20, 2021, 1:43pm

Hello everyone,

I’ve been using hassio OS on a raspberry Pi 3B+ for several month, with my setup opened to the internet thanks to DuckDNS (I followed this amazing tutorial : Beginner’s guide to Home Assistant by JuanMTech )
Following a change of internet service provider (from SFR to Orange, in France), I decided to do a fresh start of my whole setup and reinstalled Hassio from the begining. So I watched the new tutorial from JuanMTech : Link to the video

I did everything as he explains, but ended up stuck when setting up NGINX to use hassio outside of my network. Indeed, I did exactly as he said, but in the end I can only access my configuration with at my local IP address, while connected to my home newtork.

I searched in forums, in the discord and github, but I can’t find any answer to my problem.
Do you guys have any idea of what I could be missing or doing wrong ?

More information on what I did below:

Opening the ports of my home network

Setting up a static IP address in Hassio :

Installation of MariaDB:
MariaDB

Setup of NGINX (with SSL and a DuckDNS domain):

Also, because of a recent update, I saw that I should add some lines in configuration.yaml:
yaml

But whether I add it or not, the result is the same.

So here is what I see when I try to connect to the domain:

Thank you guys for your help, I hope this is an issue we can fix !
Adrien

francisp · September 20, 2021, 1:46pm

if you test your public ip on https://www.portcheckers.com/ , is the port open ?

SoqC · September 21, 2021, 12:19pm

Thank you for your answer.
So I tried to check this IP address on your website : 127.0.0.1 and it showed that:

So I think the port is open, am I right ?

francisp · September 21, 2021, 12:26pm

No, that is no test, you need to enter your public ip

Go to https://whatsmyip.com/ , it will show your public ip. Write it down.
Go to https://www.portcheckers.com/

in the red field, enter the ip you just wrote down

francisp · September 21, 2021, 12:32pm

Ok, that part is ok.

Do you try https://xxx.duckdns.org or https://xxx.duckdns.org:8123 ?

SoqC · September 21, 2021, 12:42pm

Both of them are not working, with the same error

francisp · September 21, 2021, 12:48pm

Better delete the picture above with your port results.

Lets try this:

forward in your router port 8123 to your HA machine, then try https://xxx.duckdns.org:8123 again

SoqC · September 21, 2021, 12:53pm

I deleted the picture, thanks.

Ok so my ports are now:

and this appears when I go to this address : https://xxx.duckdns.org:8123/

francisp · September 21, 2021, 12:57pm

And if you open a ‘private windows’ (incognito mode) window in your browser ? Better then ?

SoqC · September 21, 2021, 1:00pm

Well, in fact it doesn’t work (in and out of incognito mode).
I thought it worked but it was an old page in cache
So the message is still:

francisp · September 21, 2021, 1:02pm

Ok, might be your router does not support hairpinning. You don’t have a way to test from outside your network ? e.g. a phone on 4G ?

SoqC · September 21, 2021, 1:06pm

Just tried from my phone in 4G and I have the exact same error (It took too long to respond)

francisp · September 21, 2021, 1:07pm

and http://xxx.duckdns.org:8123/ ?

SoqC · September 21, 2021, 1:10pm

I have the same error again

francisp · September 21, 2021, 1:17pm

Strange. Ports are open, forwarding is done.

one more test

go to https://www.nslookup.io/ , enter xxx.duckdns.org (without http:// or https://)

Is it the same IP-address as the one you wrote down earlier ?

SoqC · September 21, 2021, 1:20pm

Just tried it. Yes it is the same address.

I’m looking into my ISP forum to see if there is a problem with hairpining. Apparently some people have problems with that, but I don’t know if the problem has been fixed.
(I’m in France, the ISP is “Orange”)

SoqC · September 22, 2021, 7:43am

Hi everyone,

So I continued my investigation and tried other solutions without success… But, when I tried to connect to the local IP address of my RaspberyPi (192.168.xxx.xx) on my file explorer (trying things with SambaShare) Google Chrome opened and displayed this message:

Does anyone understand what it means ? I don’t understand what I should do to set up the host.
Thanks for your help ! I hope we can find a solution soon

bym007 · September 23, 2021, 7:03am

I have a similar issue. I have HASS VM running and Nginx as a docker on Unraid. Not that it should matter.

Nginx can forward to other dockers and my firewall just fine. Now, I have setup the Proxy for Hass, and it gives me the login prompt.

Once I enter username password, it gives me error in connecting.

I have entered following configuration lines to whitelist Nginx proxy IP (internal IP).

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 10.xx.xx.xx  # Add the IP address of the proxy server

Any pointers from here please ?

francisp · September 23, 2021, 8:40am

Try clearing your browser’s cache, or using incognito/private mode in the browser.

bym007 · September 23, 2021, 9:33am

I had already tried using a different browser, as well as in private mode on a different browser.
Still getting the error “Unable to connect to Home Assistant”.

Any other ideas please ?