OTA not possible when using SSL

[despian]

There were already many issues raised for this problem: #457, #426, #331, #291, #237 ... and probably some others I missed. They have all been closed as stale ... yet the issue remains.

There was a PR which would have fixed this, which was never reviewed or merged and was then closed for being stale ... #236

Can we just revive #236 and merge it? I would also be willing to submit a new PR, but would it ever be reviewed or merged?

(For searchability) You will see errors like:

... Firmware is not accessible on the server at ...
or
403 Forbidden

[despian]

For anyone who comes across this issue and is looking for a workaround. If you are using the "NGINX Home Assistant SSL proxy" plugin, you can configure a virtual host to proxy the firmware update URLs over HTTP.

e.g.

Create the file:

/root/share/nginx_proxy/tasmota-ota.conf

# HTTP-only vhost for Tasmota OTA firmware downloads
server {
    listen 80;
    listen [::]:80;

    # Replace with a local hostname you control
    # e.g. tasmota-ota.local
    # it should point to the local IP of your home assistant install
    server_name <YOUR_OTA_HOSTNAME>;

    # Serve ONLY the firmware directory over HTTP
    location ^~ /data/firmwares/ {

        # Proxy to your TasmoAdmin add-on (adjust these!)
        # <HOSTNAME>: TasmoAdmin container hostname or local host IP
        # <PORT>: TasmoAdmin's port
        proxy_pass https://<TASMOADMIN_HOSTNAME>:<PORT>/data/firmwares/;

        # Standard proxy headers
        proxy_http_version 1.1;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

        # Browser / caching tweaks (harmless for Tasmota devices)
        add_header Cache-Control "public, max-age=3600";
        add_header X-Content-Type-Options nosniff;
    }

    # Everything else on this host should redirect to HTTPS
    location / {
        return 301 https://$host$request_uri;
    }
}

Make sure "customize" is active in your nginx plugin conf and restart the plugin.

Then use YOUR_OTA_HOSTNAME in the "OTA Server IP" field and 80 as the "OTA Server Port" in your TasmoAdmin settings. Also, make sure the frontend update check is disabled.

[github-actions]

There hasn't been any activity on this issue recently, so we clean up some of the older and inactive issues.
Please make sure to update to the latest version and check if that solves the issue. Let us know if that works for you by leaving a comment 👍
This issue has now been marked as stale and will be closed if no further activity occurs. Thanks!