hi I’m trying to get lets encrypt working with my home assistant running on a PI. I read the documentation nearly 10 times now and I still cant get it to work.
the addon guide https://github.com/home-assistant/addons/blob/aa4f2d7f0f447c57b4cd4ebda24ebc738a3d3176/letsencrypt/DOCS.md
everything works as far as routing . I have my own hosted domain and the A record pointed to my external ip which is static. port forwarding is all good I can access my HA via my domain name ie xxxx.aaa.com:8123
i have also verified that port 80 is not blocked by my isp by forwarding 80 -> 8123 browsing via my domain name once again works fine.
I have the following port forwards external 80 -> ha ip port 80
external 443 -> ha ip port 443
external 8123 -> ha ip por 8123
my router is also a pi3b+ running OPENWRT
here is the log file
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] file-structure.sh: executing...
[cont-init.d] file-structure.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
[17:48:40] INFO: Selected http verification
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for ha.XXXXXXXXXXXX.com.au
Waiting for verification...
Challenge failed for domain ha.XXXXXXXXXX.com.au
http-01 challenge for ha.XXXXXXXXXXXX.com.au
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
- The following errors were reported by the server:
Domain: ha.XXXXXXXXXXXXX.com.au
Type: connection
Detail: Fetching
http://ha.XXXXXXXXXXXXXX.com.au/.well-known/acme-challenge/83KePrd4d40oH8XTPGBs1K0bz9mIsK_GjOrzdD5Zrpw:
Timeout during connect (likely firewall problem)
To fix these errors, please make sure that your domain name was
entered correctly and the DNS A/AAAA record(s) for that domain
contain(s) the right IP address. Additionally, please check that
your computer has a publicly routable IP address and that no
firewalls are preventing the server from communicating with the
client. If you're using the webroot plugin, you should also verify
that you are serving files from the webroot path you provided.
[cont-finish.d] executing container finish scripts...
[cont-finish.d] done.
[s6-finish] waiting for services.
[s6-finish] sending all processes the TERM signal.
[s6-finish] sending all processes the KILL signal and exiting.
config
email: [email protected]
domains:
- ha.XXXXXXXXXX.com.au
certfile: fullchain.pem
keyfile: privkey.pem
challenge: http
dns: {}
i cant view it log as i believe its locked away in its own docker container. ( docker is something i have zero experience with)
i expect i cant follow any of the other guides for the same reason. as almost all the commands ( such as apt-get) are not available on the PI version of home assistant.
what am i missing? it keeps bitching about a possible firewall issue but i can browse to it freely with out ssl via my domain … is the addon broken , something missing from the documentation, or am i just dumb?
