home-assistant.io/source/_addons/lets_encrypt.markdown

layout, title, description, date, sidebar, comments, sharing, footer, featured

layout	title	description	date	sidebar	comments	sharing	footer	featured
page	Let's Encrypt	Automatically manage your SSL certificate using Let's Encrypt.	2017-04-30 13:28	true	false	true	true	false

You should not use this if you are also using the [DuckDNS add-on]. The DuckDNS add-on has integrated Let's Encrypt support.

Setup and manage a Let's Encrypt certificate. This will create a certificate on the first run and will auto-renew if the certificate is within 30 days of expiration.

This add-on uses ports 80/443 to verify the certificate request. You will need to stop all other add-ons that also use these ports. If you don't need a port (like with https you don't need port 80) you can remove this from network config.

{
  "challenge": "https",
  "email": "example@example.com",
  "domains": ["example.com", "mqtt.example.com", "hass.example.com"]
}

Configuration variables:

• challenge (Optional): Default it use 443 ('https') you can change it to 'http' for use port 80.
• email (Required): Your email address for registration on Let's Encrypt.
• domains (Required): A list of domains to create/renew the certificate.

{% linkable_title Home Assistant configuration %}

Use the following configuration in Home Assistant to use the generated certificate:

http:
  base_url: https://my-domain.tld:8123
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

If you use a other port as 8123 or a SSL proxy, change the port number.