SSL certificate in Hass.io & Home Assistant Core on Synology - #024

00:00 Intro

Thanks andilge for pointing me to this one!

00:57 - First step is to locate certificate. For that we open terminal application and go to folder:

/usr/syno/etc/certificate/system/default

02:15 - Using Synology - Control Panel - Task Scheduler, create new task. Give it a name and go to Task settings, where you have to copy following script:

SRC="/usr/syno/etc/certificate/system/default"
/usr/syno/bin/synowebapi --exec api=SYNO.Docker.Container version=1 method=restart name=homeassistant
fi

Please verify that first two folders are according to your setup. By default they should be like this.

http:

You can now run script so it can copy certificates for the first time.

09:11 - If you have problem and your system seems to be running on Synology Inc. certificate, check if you have other certificates by looking in terminal to this folder:

/usr/syno/etc/certificate/_archive

If you cant access folder, first use command "sudo -i" to elevate your access rights.

13:11 - Verify also if your SSL certificates are in /usr/syno/etc/certificate/system/default or some other sufolder in /usr/syno/etc/certificate/_archive AND check Docker container name in script as it should match Docker container name in Synology.

13: 35 - Scripts also goes to Control Panel - Task Scheduler:

SRC="/usr/syno/etc/certificate/system/default"
DEST="/volume1/docker/home-assistant"
/usr/syno/bin/synowebapi --exec api=SYNO.Docker.Container version=1 method=restart name=home-assistant
fi

http:

Thank you for watching this video. If you have any questions or comments , please leave them below or contact me on the Discord Server.

Be safe and have fun!
BeardedTinker

Twitter: @BeardedTinker

#HomeAssistant #hassio #Letsencrypt #Synology

[mitchellllora]

This guy knows his stuff! I watched episodes 23 and 24. Now my HA connection is encrypted! Thank you!

[megaturbo]

Thank you, it take me about 10 minutes to setup proper SSL, and I have used Synology.me built in DNS service with Let'sCrypt certificate, so I can manage my synology and home assistant from one external domain, with just different ports.

[tsuna]

this video maybe 2 years old but it still works :-) i got the ssl working thanks to episode 23 and 24. the only thing i can't get to work is the script to copy the pem files over.
it always says permission denied.

[anotheraccount]

Thanks for all the details.
Why not using DDNS from Synology and the self-signed certificate from synology?

[akhlghatyan]

Thank you friend, I got working my HA core with let'sencrypt certificate

[cotoilaurentiu]

Just what I was looking for... Thank you!!!
Can you please make a tutorial for how to integrate HA with Synology LDAP server? Many people use LDAP and I think it will be also a really useful tutorial...
Thank you again!

[labaland]

Thank you! keep doing home assistant videos!

[CallOfRadio]

very helpfull video. helped me getting one step closer to a secure world :)

[yagrasdemonde]

Hello,

Thanks for these great videos.
I carefully followed the previous one (DuckDNs and Let's Encrypt) and this one to access my Home Assistant from the outside.
Small question: I would like this access from the outside to be possible only for Home Assistant, and not to the DSM of the Nas.
Will this be the case?
Thank you very much

[Herbyak]

Thxs for the great video.
I have installed HA Vers 0.116.4 on a raspberry in my LAN together with the Synology station. Is it possible to use this script and what would be the path under DEST=?

[Merwenus]

Isn't it vulnarable to open port 80 to external access? I'm trying to make the certificate in OpenWRT just to avoid constant opening of port 80, but I can't copy the certificate to the synology nas from OpenWRT.... :) I may open port 80 to work with synology but I'm afraid it is a bad idea.

[image]

I just went through the steps of setting up Alexa offline(without the cloud). I can't use the DuckDNS plugin for HA, becasue I have DSM 7. In your episode #23, is that all I need to do to have my HTTPS address? I think that's all I'm missing from my task.

[Herus]

Dear BeardedTinker! Thank you for all videos, they are very usefull. I've one problem.

My HA installation folder is /docker/home-assistant
I created ssl folder and the required 2 files are there

but when i put in configuration.yaml
http:
ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem

i got error that configuration is incorrect (wrong path).

My question is: What path i should to type in configuration.yaml?

[aussiepe]

So I went through all of this, but since it isn't secured I'm not able to log into the home assistant android app... It doesn't allow going and doing that.

Any help?

[filipwtterwulghe]

Thanks for the video. I have some rights issue with the first script. cp: cannot open for reading: Permission denied . How should I grant extra rights to that default directory ?

[MrChChristophe]

Hi, thank you for the video. I've a little issue. I want to run the script from a different user witch is in administrator group. But all certificate files are owned by root user. Then i've got an error. How could I fix this issue ?

[laszlonieuwenhuizen]

Hi,
I have no "renew.json" in my archived certificate folder. Only "cert.pem", "fullchain.pem", "privkey.pem", "syno-ca-cert.pem" and "syno-ca-privkey.pem".
What can be wrong?