configuration.yaml

# Use LetsEncrypt SSL certificates and set port to default SSL/TLS port.
# This approach does not use Nginx.
http:
  server_port: 443
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

letsencrypt-configuration.yaml

# Example LetsEncrypt add-on configuration for using Route53 
# DNS challenge.
#
# 1. Go to Supervisor and install the LetsEncrypt Add-on
# 2. Enable/start it
# 3. Go to Configuration and update using the example below
email: your-email@example.com
domains:
  - hass.example.com
# Saved to /ssl
certfile: fullchain.pem
keyfile: privkey.pem
# Make sure to set to dns not http
challenge: dns
# Set up Route53 provider w/ key and secret
dns:
  provider: dns-route53
  aws_access_key_id: your-access-key
  aws_secret_access_key: your-secret-access-key