SSL with multiple domains

I have my HA running via DuckDNS & SSL, conform this tutorial https://www.home-assistant.io/addons/duckdns/

On first install, I only entered my DuckDNS domain

my-domain.duckdns.org

to the config.
Now I would like to add the possibility for subdomains, as described in the manuals

my-domain.duckdns.org, *.my-domain.duckdns.org

If I change my config, will new certificates be generated, or do I have to start the process all over again?

Regards

And to all: HAPPY NEW YEAR!

I have almost the same situation. I have Hass.io with FreeDNS and SSL set up with the Let’s Encrypt add-on which has been working fine. Now I have registered my own domain and would like to add this as well.

I added the new domain to the Let’s Encrypt config as shown below (opened port 80 for the http challenge) and started the Let’s Encrypt service to renew / create the certificates, but I am not sure it worked. When using the new domain name to connect to HA it comes up as unsecured.

{
  "email": "[email protected]",
  "domains": [
    "xxxxxxx.privatedns.org",
    "*.new-domain.com"
  ],
  "certfile": "fullchain.pem",
  "keyfile": "privkey.pem",
  "challenge": "http",
  "dns": {}
}

Do I also need to add the new domain in the configuration.yaml file. If so how? This is how it is today:

http:
  base_url: https://xxxxxxx.privatedns.org:8123
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

I just tested multiple domain with duckdns and it work…

It work only one one of the domain as the base_url… You will need to restart HASS to make the new extra domain work without your browser complain.

I am re-posting this here… as it is more appropriate

I can now access PLEX outside my network and within my network goes to my local HA IP at port 32400.

The one problem I am faced with is when I access outside my network through my Duck DNS domain then it isn’t secure. My HA instance is still secure how can I leverage Lets Encrypt for my plex domain and also use the domain in Duck DNS. I have looked around but couldn’t find a solution

I am using NGIX as my local proxy along with Adguard. I have re-booted HAS OS