SSL for local domain

Configuration
1

I currently access my HA locally via http://ha.local
I don’t want my HA to be accessible from outside

I would like to configure SSL as some web features only work via https.
Is it possible?

2

Have a look at:

3

You can use self-signed certificate if you don’t plan to use Google TTS because both don’t work together.

2 Likes
4

I don’t think Alexa works with self signed certs either, though I may be wrong.

EDIT: I am wrong on this, see following post.

1 Like
5

Hi,

for Alexa self singed is OK. But Let’s Enrypt rocks on this Topic :slight_smile:

2 Likes
6

Before the will be a misunderstand , Let’s Encrypt does not work, with local Domains

7

I have a “normal” domain registered if that helps. It currently points nowere.

8

Yes than, you can setup Let’s Encrypt and access it via your Domain, but this means you have to Setup a Port forward on your Router.

You also should set an Password for HA and then you can put also a Proxy between your Router and your Homeassistant-Website, just to get some security on your Setup.

Here is a good Article for that:

https://home-assistant.io/ecosystem/nginx/

Just saw in your original Post, that you don’t want to NAT your HA, than you could only use, self-singed Certs.

9

Found a solution without exposing my HA:

  1. On my router redirect to mydomain.com to my HA machine.
  2. Get certificate for mydomain.com via TXT record validation
10

Can you let me know how you did that? I would like the https function to work but then tts stops working, I don’t want to expose HA either.

11