How to setup DuckDNS domain name and Lets Encrypt SSL certificate for Home Assistant

This video is a tutorial on how to setup DuckDNS domain name and Lets Encrypt SSL certificate for Home Assistant

First things first, you need to know what your public IP is, so lets go to....

From there, you need to make sure that you have port forwarding setup....

- port 443 needs to be open to your home assistant server on whatever port you are using
- port 80 needs to be open temporarily to your home assistant server for lets encrypt to download ssl cert. (This will also need to be open at least every 3 months to update the certificate)

Once you know your IP and have the correct ports open, you are ready to setup a domain name, so go to....

Once you are logged in and have setup a domain name to use, lets move over to the command line and download our new ssl cert.

Lets go ahead and stop home assistant services while we perform the ssl cert download...

You need to create a folder for certbot-auto inside our home assistant directory...

mkdir certbot
cd certbot
chmod a+x certbot-auto

./certbot-auto certonly --standalone --standalone-supported-challenges http-01--email (YOUR EMAIL HERE) -d (YOUR NEW DOMAIN NAME HERE)

Now that is done, lets make sure we have the right permissions setup....

sudo su -
cd /etc/letsencrypt
chmod -R 0755 live
chmod -R 0755 archive

just to make sure we have the files we need....

cd live/(YOUR DOMAIN NAME)

exit

Now lets update our home assistant config

base_url: (DOMAIN NAME):8123 (or whatever port you use)

Reboot home assistant for the changes to take....

That should be it, you should now be able to hit it via https using your new domain name.....

If you like the video, please subscribe to my channel. If you have any questions, hit me up in the comments below. Also, if there are any videos you would like to see, let me know as well....

[evocrer]

Great Tutorial! It worked perfectly! I have to admit...when I clicked your video and saw that you were recording from your car, I though this was going to be a joke. I'm so glad I watched the video and learned a lot from it. Never judge a book by its cover, eh lol. Keep up the good work!

[TuncayAyhan]

Underrated AF. Dude you made it look so simpel! I thought I couldn't make it till the end without hiccups. Thank you good Sir!

[Avico]

great tutorial !
my 2 cents for configuring SSL on QNAP running HA on docker.

After configuring the ports (443-->8123)
You need to log on qnap QTS page,
go to security page and enable SSL, u will have 2 options
first using qnap certification (not free) and the other one is with encryptit (free),
Choose encryptit .
Then - u need the files ....
Not easy but somehow manage to find it.
u need to go to security --> Certificate and Private Key tab --> download the certificate files,
U get 3 crt files:
SSLcertificate.crt SSLprivatekey.key
After hours of trying use and failed - i finally understand that crt files actually similar to pem files, u just need to rename them!
To fullchain.pem and privkey.pem and place them under config,
So U get :
ssl_certificate: /config/certificate.pem

ssl_key: /config/privkey.pem

And last VERY important note - U dont need duckDns!!!
U should use ur <UR_DOMAIN>.myqnapcloud.com.
So your base_url define as:
base_url:

Hopefully this could help to qnap/synolgy users

[marclambert]

Hi mate,

I haven’t try it yet and I already have questions. Did you already try to make it on an Home Assistant OS?
And my last question would be: Can we create the certificate with root ?

And also based on others comments, this is right it looks dawn simple :-)

[LuigiZotti]

The standalone specific supported challenges flag is deprecated. Please use the
--preferred-challenges flag instead.

usage:
certbot-auto [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...


can help me?

[Terrier]

Hi Burns, just received an email from let's encrypt stating that ACME TLS SNI is reaching end of life till Feb 2019.

The resolution is to update the ACME client to use an alternative validation method (HTTP-01, DNS-01 or TLS-ALPN-01) before this date or else certificate renewals will break and existing certificates will start to expire.

I have followed your instruction guide closely to make things work for my HA.

Do u mind do a video on how to update from ACME to the recommended validation method?

Appreciate your hard work and sharing.

Thank you

[photo]

I am in the process of moving my setup from my RPi 2 to a dedicated Ubuntu 16.10 server setup and was curious if you knew what would be involved in moving the duckdns/letsencrypt setup. I believe you had also moved to Hassbian recently and wondered what you did for this. Is there a way to copy/move the files from the Rpi to the new server or is it better to delete the duckdns domain and start new again? I thought about adding a new domain on my current account but it appears I can't tie it to the same ip.

[TrillasAdventures]

is this how you do it for Hass.io? im having trouble with lets encrypt.. im unable to enable the duckdns add-on..however im able to reach my xxxx.duckdns.org address remotely. so i just need to figure out why its not encrypting? any ideas? Hass.io on ubuntu vm thanks

[monkeys]

As usual an excellent tutorial. I'm new to Home Assistant and have been following your recent Docker series (Thank you!!!). Will this same procedure work within a Docker system? I'll give it a try but so far tonight nothing else has worked.

[evocrer]

Reformatted by pi to do a fresh install of home assistant and glad to come by this video AGAIN. Second time around you've saved me lol. Thanks for the great work. Everything worked perfectly. Question...is updating the SSL certificate a manual process, or once its about to expire, do I just open port 80 reboot home assistant, and it'll automatically update?

[ThePhiliposophy]

Awesome tutorial! Thanks for your hard work on all of these! A quick question: are the certificates renewed automatically using this method?

[LAghemo]

As always you give us great guides, thanks a lot.
Nevertheless... I followed all the steps precisely, but it gives me an error saying "The server could not connect to the client to verify the domain ::(and my personal data). The port forward should be ok, any advice?

[tolaxor]

hey, nice video. btw why do you record your videos in your car?

[MarcinBauer]

Im using Hass.in installed on a SD card with Etcher. When I type the commands in my SSH I get:
Connecting to dl.eff.org (151.101.12.201:443)
wget: error getting response: Connection reset by peer
What could be wrong?

[vinup]

I am behind mutiple NAT setup with my ISP. what is the workaround?

[photo]

I was able to finally get everything installed however when I finally pulled up the url the connection is not secure. It shows a yellow triangle with a greyed lock. Did I do something wrong during the setup process?

[pindes]

Excellent video, very precise and clear....but please I need help because when I launch the command "./certbot-auto certonly --standalone http-01 --email (MY EMAIL) -d (MY DOMAIN)" the installation hangs at "Installing Python packages..." and no longer responds. I'm trying to install it on a rpi with hassbian. Thank you

[MrDavidmcdonald]

Hey, nice video, can this be done using hassio?

[TSIXGaming]

Hey man thanks for this tutorial i got this working just one issue in the documentation below the video it was different to the code used in the video
ssl_key: NAME) i needed to remove the . and add /privkey.pem
ssl_key: /etc/letsencrypt/live/(DOMAIN NAME)/privkey.pem
I have to write back to you to on another tutorial soon, thanks!

[איתןעמר-לה]

I can not login to pi raspberry SSH The password is incorrect
What to do?