Unable to log in from external URL after new authentication

I’ve got a HASS installation in a virtual environment on a Raspberry Pi that’s been working fine for a couple years. I recently was unable to log in from an external IP so I followedthe instructions here to remove previous authentication files.

I pointed a browser to

remoteberrypi.local:8123

and created a new user and saved the login. As I understood the instructions, that was supposed to be the step that allowed my login from an external URL.

But still when I try to login from my duckdns url, I get told it’s logging in with “Home Assistant Local” but then returns an “Error: something’s wrong” message.

I’ve tried multiple browsers, cleared cache, tried in icognito mode. I’ve confirmed that my duckdns ip address is correct and my certificates were renewed just a month ago.

My configuration.yaml:

 auth_providers:
  - type: homeassistant
  - type: legacy_api_password
api_password: !secret ha_password

I’ve removed the legacy reference to legacy_api_password in the http: block.

I don’t see any unusual blips in the logs. I can log in fine locally, but login from outside my network fails. Suggestions?

What is the url configured in http: ? It needs to be your duckdns url like this, assuming you are port forwarding 8123 to 8123…

http:
  base_url: xxxx.duckdns.org:8123
  ssl_certificate: /home/homeassistant/dehydrated/certs/xxxx.duckdns.org/fullchain.pem
  ssl_key: /home/homeassistant/dehydrated/certs/xxxx.duckdns.org/privkey.pem