Hi all,
I have HASSIO installed on a Raspberry Pi 3B+ and I use Duck DNS as free DNS provider; I installed the Let’s Encrypt add-on for Home Assistant and it worked fine until about a month ago, when I changed my ISP.
My previous ISP gave me the possibility to open the public port 80, so I was able to renew my Let’s Encrypt certificate using the HTTP challenge; now my new ISP give me a range of public ports that doesn’t include port 80 (the port range starts at 49152 and I can’t do anything to change this range).
I tried to follow instructions on https://github.com/home-assistant/addons/blob/8d194b2446402ea1602172dcd7f00bf0698d567f/letsencrypt/DOCS.md to enable the DNS challenge but without success due to some configuration option that I am unable to set correctly.
This is the configuration I put on the DNS section of the Let’s Encrypt add-on after selecting the DNS option for the challenge:
email: [email protected]
domains:
- mydomain.duckdns.org
certfile: fullchain.pem
keyfile: privkey.pem
challenge: dns
dns:
provider: duckdns
and this is the Let’s Encrypt add-on log after its restart:
s6-rc: info: service s6rc-oneshot-runner: starting
s6-rc: info: service s6rc-oneshot-runner successfully started
s6-rc: info: service fix-attrs: starting
s6-rc: info: service fix-attrs successfully started
s6-rc: info: service legacy-cont-init: starting
cont-init: info: running /etc/cont-init.d/file-structure.sh
cont-init: info: /etc/cont-init.d/file-structure.sh exited 0
s6-rc: info: service legacy-cont-init successfully started
s6-rc: info: service legacy-services: starting
services-up: info: copying legacy longrun lets-encrypt (no readiness notification)
s6-rc: info: service legacy-services successfully started
[08:22:13] INFO: Selected DNS Provider: null
[08:22:14] INFO: Use propagation seconds: 60
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...
Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --null --null-credentials /data/dnsapikey
s6-rc: info: service legacy-services: stopping
s6-rc: info: service legacy-services successfully stopped
s6-rc: info: service legacy-cont-init: stopping
s6-rc: info: service legacy-cont-init successfully stopped
s6-rc: info: service fix-attrs: stopping
s6-rc: info: service fix-attrs successfully stopped
s6-rc: info: service s6rc-oneshot-runner: stopping
s6-rc: info: service s6rc-oneshot-runner successfully stopped
I am not able to solve this problem due to my limited experience with these kind of problems; please, is it possible to obtain more detailed help about the DNS challenge configuration of the Let’s Encrypt add-on?
Thanks in advance for any hint.
Regards.