Home assistant external access

[KozoleJ]

I am new to networking so this question might be stupid.
At home, I have a Synology server running DDNS. For explaining purposes let's say this domain is https:\\home.synology.me. I have added an SSL certificate through the built-in Let's Encrypt wizard.
On the same network, I have a home assistant server that I want to access externally. I want to access it by port forwarding so I am taking some security precautions.
I have enabled dual authorizations, I added MAC address filtering on my router for port and I want to access my app through https but I can not get it to work.

I get "Failed to perform SSL handshake, please ensure your certificate
." Do I need a separate certificate for my Home assistant?  Do I need to reroute my traffic to my home assistant server or what?

[Jealy]

Use a reverse proxy, I assume your Home Assistant isn't running on port 443.

 

Easiest way is to give Nabu Casa some money and use their service.

[m9x3mos]

11 hours ago, Jealy said:

Use a reverse proxy, I assume your Home Assistant isn't running on port 443.

 

Easiest way is to give Nabu Casa some money and use their service.

I agree, if you want to go direct, setting up ha proxy or similar as a reverse proxy is the way to go. 

[LIGISTX]

On 6/1/2023 at 8:54 AM, Jealy said:

Use a reverse proxy, I assume your Home Assistant isn't running on port 443.

 

Easiest way is to give Nabu Casa some money and use their service.

 

On 6/1/2023 at 8:14 PM, m9x3mos said:

I agree, if you want to go direct, setting up ha proxy or similar as a reverse proxy is the way to go. 

Another option is cloudflare zero trust tunnel. Works fantastic.

[MG2R]

Instead of opening your system to the world, run WireGuard and bring your client into the network. That, or run zero trust like ligistx suggested 

[simsoueu]

I use cloudflared, it’s available in Home Assistant as well so the configuration is relatively easy!

 

Another great way like suggested is to use a VPN like WireGuard or better yet look into Twingate! That lets you isolate the client to only be able to access the home assistant instance and nothing else on the network!