Split horizon dns not working

Configuration
1

i’m trying to configure split horizon dns in my unifi router for home assistant after i configure the A record in unifi to mi home assistant IP i get this error Unable to fetch auth providers. https://mydomain/? auth_callback=1
any idea on how to solve this?

2

There is an issue with the DNS after the list update.
I have posted an issue for it, but if it has been heard is uncertain.
You are welcome to post in the issue too.

You can do a “ha dns options --servers dns://1.1.1.1” to solve it currently, but it will not be permanent saved, so a restart of the OS might remove the added server again.

3

i have to use cloudflare dns for the command eve if i use something else?

4

If you do a “ha dns info” then you will probably see your current split-DNS listed as a local and not as a server and that is the issue.

I just realized that I actually got it to work by adding my own DNS server as a server, so it is both listed as a local and as a server, which worked for renewing Let’s Encrypt certificates.

5

how i add it as a server?

locals:
- dns://1.1.1.1
- dns://149.112.112.112
- dns://192.168.50.1
- dns://192.168.50.46
- dns://9.9.9.9
mdns: true
servers: []
update_available: false
version: 2026.02.0
version_latest: 2026.02.0

server is blank right now

6

Yeah and that is the issue.
It seems like locals are only used for reverse-DNS, so something is wrong with the add DNs server routine in HAOS.

use “ha dns options --servers dns://x.x.x.x --servers dns://y.y.y.y --servers dns://z.z.z.z”

7

i send this command but it said the server flag does not exist

8

manged to find the issue i wrote server instead of servers but still no result

9

Still not clear on what issue you are trying to solve:

  • Setup your public DNS
  • Issue the certificate
  • Install the cert on HA (if desired) - I don’t care / haven’t done this.
  • Make sure HA’s IP is static.
  • Place an A record in your internal DNS for HA.
  • Setup Dynamic DNS for your external IP (if required).
  • Forward a port from outside to HA (again optional / you may want to use a VPN instead).

Done.

10

i’ve done most of this
i’ve cloudflare dns setup with my domain
i have ngnix proxy manager with a ssl wildcard certificate for my services including HA
what i’m trying to achive is a split horizon dns to have ha with ssl in my internal network so i can have two-way audio from my doorbell and acces to microphone
but when i create the A record into unifi i get this error Unable to fetch auth providers. https://mydomain/? auth_callback=1

11

In a split-DNS setup you do not use the public DNS, because it holds the wrong entries for internal usage.

12

Where do you get that error?
In Unify or HA?
If it is HA, then you might also need to look at Authentication providers - Home Assistant

13

what do i have to add? a trusted network?

14

I am not really sure.
I do not use a reverse proxy. I prefer a VPN instead and that means local connections.

15

If there was no external component, it wouldn’t be called “Split Horizon DNS” it would be called “Internal DNS”. **

** - Well technically you could have two internal horizons, but that would be an unusual configuration.

Assuming an internal/external split horizon, there will always be an external DNS “component” - either a dedicated one or your local DNS server may be configured to service both in which case your local DNS server is globally authoritative - hence it is a public DNS when accessed from the internet.

For clarity:

  • Hosts on the internet use Public DNS.
  • Hosts on your LAN use the internal version.

Some hosts can be exclusively listed in either the public or internal versions.
When hosts are listed in both, they typically have:

  • The internal IP in the internal DNS.
  • The IP of your router in the public DNS. **
  • A port forward (on the router) to forward them to the correct internal IP.

** - Well I use a CNAME pointing to a DDNS record - so only one record has to change.