I’ve been banging my head against the wall for a while on this one, so any help would be appreciated. The networking part of HA is not my strong suit.
I can access HA just fine when connected to my local network using either http://[IPaddress]:8123 or with http://homeassistant.local:8123, but cannot access when remote using https://mydomain.duckdns.org
Here is my setup…
- Home Assistant OS 2021.9.7 running on Raspberry Pi4
- ATT router in IP Passthrough
- eero mesh wifi with port forwarding set up for 443 on the Home Assistant IP address
- DuckDNS and Nginx configured as below
DuckDNS Config…
lets_encrypt:
accept_terms: true
certfile: fullchain.pem
keyfile: privkey.pem
algo: secp384r1
token: 1234....
domains:
- mydomain.duckdns.org
aliases: []
seconds: 300
No errors in the log
NGINX Home Assistant SSL proxy config…
domain: mydomain.duckdns.org
certfile: fullchain.pem
keyfile: privkey.pem
hsts: max-age=31536000; includeSubDomains
cloudflare: false
customize:
active: false
default: nginx_proxy_default*.conf
servers: nginx_proxy/*.conf
Under the network section I have typed in 443 and left 80 blank.
No errors shown in the log.
Configuration.yaml…
http:
#ssl_certificate: /ssl/fullchain.pem
#ssl_key: /ssl/privkey.pem
#server_port: 443
use_x_forwarded_for: true
trusted_proxies:
- 172.30.0.0/16
- 192.168.4.0/24
Note that I’ve tried various IPs under the trusted proxies ( 172.30.33.0/24, 172,30.32.0/24), tried removing 192.168.4.0/24, tried using the ‘server_port’, but none of that hasn’t done anything to help the situation. This is just the current state. The server_port actually makes things worse, I lose the local connection to HA and have to go in and change the configuration.yaml via SSH.
One thing that I’m seeing that is probably an obvious problem is the port forwarding with the eero system. When I go to canyouseeme.org and type in 443 the port shows as not open. As a test I opened port 80 on my laptop and it is seen as open. So it looks like port forwarding with eero works, but I’m not sure if there is a missing link somewhere in there for HA.
Anyone had success with remote access using eero? Or have any thoughts on settings I should change?