2.0 KiB
layout, title, description, date, sidebar, comments, sharing, footer, featured
| layout | title | description | date | sidebar | comments | sharing | footer | featured |
|---|---|---|---|---|---|---|---|---|
| page | Let's Encrypt | Automatically manage your SSL certificate using Let's Encrypt. | 2018-04-18 10:55 | true | false | true | true | false |
You should not use this if you are also using the [DuckDNS add-on]. The DuckDNS add-on has integrated Let's Encrypt support.
Setup and manage a Let's Encrypt certificate. This addon will create a certificate on the first run and will auto-renew if the certificate is within 30 days of expiration. This add-on uses port 80 to verify the certificate request. You will need to stop all other add-ons that also use this port.
{
"email": "example@example.com",
"domains": ["example.com", "mqtt.example.com", "hass.example.com"]
}
Configuration variables:
- email (Required): Your email address for registration on Let's Encrypt.
- domains (Required): A list of domains to create/renew the certificate.
{% linkable_title Home Assistant configuration %}
Use the following configuration in Home Assistant to use the generated certificate:
http:
base_url: https://my-domain.tld:8123
ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem
If you use another port such as 8123 or an SSL proxy, change the port number.
{% linkable_title Enabling auto-renewals %}
Out of the box, the add-on will not automatically renew your certificate. In fact, it only starts, tries to get/renew your certificte, and then stops. It's up to you to manually start it again whenever your certificate comes close to expiry.
However, you can automate this process using Home Assistant.
Use this in your automations.yaml to attempt certificate renewal each day at midnight:
- id: letsencrypt-renewal
alias: "Let's Encrypt Renewal"
trigger:
- platform: time
at: '00:00:00'
action:
- service: hassio.addon_restart
data:
addon: core_letsencrypt