• Got you.

    It's the server that's hosting HA that needs the certificate, which is all done with the http integration* - although unless you're using a domain / DNS record, you can't use letsencrypt.

    You might find that other integrations don't like self-signed certificates either (without a lot of fucking about).

    As a caveat - I had it all set up locally, and had it forwarded to a domain, so used letsencrypt. I stopped bothering after a while though, as I didn't I don't need it exposed externally that much.

    * I just have two lines in http.yaml with

    ssl_certificate: /pathto/fullchain.pem
    ssl_key: /pathto/privkey.pem
    

    iirc there was dicking about with formatting the keys and certificates correctly

  • Cheers. I do have it forwarded to a domain so guess I should be able to use letsencrypt.

    Although I do seem to remember that the Alexa integration looked pretty complex so there is still every chance I won't get round to it.

About