Hi there, I'm new to this community. I'm trying to switch my home assistant to https but it looks impossible. When I run let's encrypt add-on with http challenge, log say:
Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
Domain: ha.gabrielemattioli.eu
Type: unauthorized
Detail: : Invalid response from http://ha.gabrielemattioli.eu/.well-known/acme-challenge/v25tNi-6LYpCz3HO_7_dIBahUyj_JjNFh1kxGjSvO-4: 404
Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.
Furthermore, I opened my 80 port and I redirected request from that port to my local ip of home assistant. When I digit my ip on browser bar, without specifying the port (so port 80) appear this message:
Hello @gabriele_m, welcome to the Let's Encrypt community.
Let’s Encrypt offers Domain Validation (DV) certificates, not IP Address certificates presently. The screen shot you are showing is using an IP Address and will generate a warning for most web browsers, and correctly so.
Did you stop the web server prior to running Certbot?
As Certbot will require exclusive access to Port 80 for that command.
You only have Port 80 Open and Port 443 Filtered (i.e. blocked).
$ nmap -Pn -p80,443 ha.gabrielemattioli.eu
Starting Nmap 7.80 ( https://nmap.org ) at 2024-06-23 19:44 UTC
Nmap scan report for ha.gabrielemattioli.eu (77.240.232.174)
Host is up (0.17s latency).
rDNS record for 77.240.232.174: u-5m-77-240-232.4bone.mynet.it
PORT STATE SERVICE
80/tcp open http
443/tcp filtered https
Nmap done: 1 IP address (1 host up) scanned in 3.57 seconds
Thanks for your answer, but I still don't know what to do. I'm not trying to certificating an ip adress but my personal domain, so I don't know what to do.
Ok, but how can i shut down home assistant without stop certbot? I use home assstant OS on proxmox so I do everything from HA. As I said before I use let's encrypt add on.
When I surf to http://ha.gabrielemattioli.eu/, I'm getting a "405 method not allowed" response. Are you running Home Assistant directly on port 80 or are you using some reverse proxy in between?
@Bruce5051 They're not running Certbot themselves, but the HA addon is using it internally..
I believe your DNS provider is GoDaddy, right? That's unfortunate, as GoDaddy recently restricted usage of their DNS API to users with certain perks/money spend et c. Most users don't have API access any longer. So you're probably stuck with using the http-01 challenge you're currently using.
I don't understand why your HA addon is resulting in a 404 though. There's really not much to configure, the addon should do all the work.
