Let's Encrypt (dont want cloudflare), no errors in log but not working

Third party integrations
1

Ive done the following:

  • Ive added the subdomain I want to use (replaces it with XXX below) to my DNS
  • set up port forwarding (80, 443 & 8123)
  • I can ping the subdomain
  • it seems to of propagated (https://www.whatsmydns.net/ all green).
  • Installed Lets Encript Add On and started without errors:
[20:23:24] INFO: Selected HTTP verification
[20:23:25] INFO: Detecting existing certificate type for XXX.YYYYYY.com
Saving debug log to /var/log/letsencrypt/letsencrypt.log
[20:23:28] INFO: Existing certificate using 'ecdsa' key type.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Certificate not yet due for renewal
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal; no action taken.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
s6-rc: info: service legacy-services: stopping
s6-rc: info: service legacy-services successfully stopped
s6-rc: info: service legacy-cont-init: stopping
s6-rc: info: service legacy-cont-init successfully stopped
s6-rc: info: service fix-attrs: stopping
s6-rc: info: service fix-attrs successfully stopped
s6-rc: info: service s6rc-oneshot-runner: stopping
s6-rc: info: service s6rc-oneshot-runner successfully stopped

My configure.yml

http:
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem
  use_x_forwarded_for: true
  trusted_proxies:
  - 172.30.33.0/24
  
homeassistant:
  external_url: https://XXX.YYYYYY.com:8123
  internal_url: http://192.168.0.15:8123

I tried adding

domains:
  - /XXX.YYYYYY.com

As per the documentation, but when I run yml check it said ‘domain:’ was not allowed.

I restarted HA but when I try to go to the domain, it times out.

2

With that setup you can only access your HA through XXX.localdomain.tld with HTTPS and that goes for both internal and external.
No HTTP port will be provided and you router will have to be able to handled hairpin NATint somehow.

3

OK, I think I understand, so how do I get it working?

4

That I do not know, because the issue and fix is related to your router and not HA.

5

Why not use cloudflare? I’ve gotten so much out of their free tier over the years that I feel almost guilty about it. They’re awesome. I’m using them for my tunnel and surprisingly took like 5 minutes to set up.

6

OK, got you, https://XXX.YYYYYY.com:8123 works, guess I got URL wrong.

7

Seems a bit overkill. Is there really an advantage for using it with HA. Guess I am just being lazy :wink: