Let's Encrypt question/issue

I wanted to set up Hassio for external access. I want to use the same url/port for internal and external, so that on my phone, I use one shortcut and it works inside and outside the network.

DDNS set up and working fine.

I was planning to use https://www.domain.com for both internal and external.

I have ports 443 and 80 forwarded to my hassio box.

My lan router has a dns override for www.domain.com, so it returns the private address.

All this is working.

Problem is Lets Encrypt add-on will not start. The error (which it took for ever to find) is can’t bind to port 443, already in use. This is correct, as I changed HomeAssistant to listen on port 443, which seemed to make sense?

Is there a right way to configure what I am trying to achieve?

I made a step-by-step using DuckDNS, but I can imagine the lets encrypt part would be the same. Maybe it’ll help ya figure out whats wrong. My guess would be you want to wait until after Let’s Encrypt has done its thing before making home assistant listen on port 443. Before that, you should just have 443 internal to 443 external and the same for port 80.

https://smarthomehobby.wordpress.com/2017/09/19/encrypt-home-assistant-with-lets-encrypt/

Thanks for getting back to me.

I read through your post and I figured a work around. I put HA back on port 8123 (I had it on 443). Added a nat rule for 8123->8123, and now I use:

https://www.domain.com:8123 both internal and external. They are secure. And Lets Encrypt is now working again on port 443.

Again, my goal was to have the same url and port internally and externally, so i would just have the one shortcut (simpler for other family members, if you know what i mean) regardless of whether you are inside or outside the LAN.

Thanks again.