home-assistant.github.io/source/_docs
Daniel Welch 4cda6df98b lets_encrypt.markdown -- automated renewal w/o port forwarding 80 (#2954)
Before finding this guide, I ran into the Port 80 problem described in this page (likely blocked by ISP) and [posted about it in the LetsEncrypt forums](https://community.letsencrypt.org/t/help-with-standalone-certbot-failed-to-bind-to-80-using-ipv4/37701/8). While this excellent guide helped me circumvent that immediate issue, a certbot engineer suggested an alternate method for automated cert renewal that did not require manually changing port mapping every time a cert needed to be renewed.

In short, he suggested using a TLS challenge rather than HTTP, so that the Let's Encrypt CA would bind port 443 externally, and specify certbot to bind to port 8123 internally for certificate renewal. He also added that pre- and post-hooks could be passed to certbot so that HA could be stopped/started and port 8123 could be freed for cert renewal. 

I have verified that this method works in a dry run on my own HA setup and modified step 8 with some suggested documentation
2017-07-09 09:32:11 +02:00
..
automation Spelling correct (#2762) 2017-06-05 11:24:25 +02:00
autostart Create systemd.markdown (#2790) 2017-06-09 17:42:16 +02:00
backend Update updater docs 2017-06-15 23:17:28 -07:00
configuration Align abbreviation 2017-07-09 09:27:17 +02:00
ecosystem lets_encrypt.markdown -- automated renewal w/o port forwarding 80 (#2954) 2017-07-09 09:32:11 +02:00
frontend Mention the iOS companion app (#2583) 2017-05-07 10:17:18 +02:00
hassbian Update raspberry pi camera steps for Jessie (#2919) 2017-07-02 16:24:43 +02:00
installation Add auto start code and information for Z-wave stick (#2857) 2017-06-20 21:28:40 +02:00
mqtt Fix typos 2017-07-04 09:44:47 +02:00
scripts The above/below conditions no longer match equal values (#2757) 2017-06-04 18:46:55 +02:00
tools Update scripts.markdown (#2849) 2017-06-20 08:12:59 +02:00
z-wave Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
automation.markdown Add information for "initial_state: True" change (#2584) 2017-05-07 10:16:22 +02:00
autostart.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
backend.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
configuration.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
ecosystem.markdowm Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
frontend.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
hassbian.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
installation.markdown added install instructions for FreeNAS, added the logo image as well (#2392) 2017-04-07 21:37:56 +02:00
mqtt.markdown Re-organisation Documentation and Getting started (#2055) 2017-02-23 11:09:41 +01:00
scripts.markdown Update script delay to include milliseconds (#2438) 2017-04-21 09:11:41 -07:00
tools.markdown Add "Tools and Helper" section (#2114) 2017-02-23 17:21:07 +01:00
z-wave.markdown Switch to new zwave entity ids by default (#2885) 2017-06-24 15:02:14 -04:00