addons icon indicating copy to clipboard operation
addons copied to clipboard

Addon does not work if HA itself is HTTPS

Open Gunni opened this issue 4 months ago • 7 comments

Describe the issue you are experiencing

Add a flag if HA is https or not, how hard can it be?

I've had this configured for years. I have had HSTS preloaded for years too, so not gonna be removing this.

http:
  use_x_forwarded_for: true
  trusted_proxies:
    - 172.30.0.0/16
    - XXXX:XXXX:XXXX:XXXX::/64
    - XXX.XXX.XXX.0/24
  ssl_certificate: "/ssl/fullchain.pem"
  ssl_key: "/ssl/privkey.pem"
  ssl_profile: "modern"

The add-on entirely breaks with this afaict.

What type of installation are you running?

Home Assistant OS

Which operating system are you running on?

Home Assistant Operating System

Which add-on are you reporting an issue with?

NGINX Home Assistant SSL proxy

What is the version of the add-on?

3.13.0

Steps to reproduce the issue

  1. enable ssl_certificate, ssl_key, ssl_profile in configuration.yaml
  2. start this add-on
  3. watch it not work, logs say 500 Internal Server Error

System Health information

There are currently no repairs pending

Anything in the Supervisor logs that might be useful for us?

2025-08-24 02:56:36.568 DEBUG (MainThread) [supervisor.api.middleware.security] /addons/core_nginx_proxy/info access from Home Assistant

Anything in the add-on logs that might be useful for us?

500 Internal Server Error

Additional information

Potentially related tickets:

  • https://github.com/home-assistant/addons/issues/1764
  • https://github.com/home-assistant/addons/issues/3055

Gunni avatar Aug 24 '25 03:08 Gunni

Add a flag if HA is https or not, how hard can it be?

I would guess intermediate?

In my case, I use a self signed certificate for my internal network and nginx simply cannot verify the authenticity of that certificate. You could set proxy_ssl_verify to off, but that would defeat the point. Adding a custom proxy_ssl_trusted_certificate is a 3-years old feature request: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2271

pyromaniac2k avatar Sep 03 '25 08:09 pyromaniac2k

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Oct 03 '25 09:10 github-actions[bot]

Untouched.

Gunni avatar Oct 03 '25 09:10 Gunni

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Nov 02 '25 11:11 github-actions[bot]

Not stale

Gunni avatar Nov 02 '25 11:11 Gunni

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

github-actions[bot] avatar Dec 02 '25 12:12 github-actions[bot]

Not stale

Gunni avatar Dec 02 '25 12:12 Gunni