Secure Connection for Emby on Synology using DDNS

[CowmanS77 1]

Trying to setup a secure connection for Emby but I am using a DDNS.  I do have my own domain name, but between my hosting company, dynamic DNS, and being new to SSL certificates, I am doing something wrong.  My guess is that I am not the only one with this issue, so if someone has a link to a previous thread, that would be helpful.  The Emby documentation on the topic is either missing a step or I am.  Thanks in advance.

[tedfroop21 86]

Have you got a PKCS  #12 certificate yet? (Or one in any format - like PEM?)

[CowmanS77 1]

I have not yet. 

[tedfroop21 86]

So you have a DDNS domain. 

Do the people you got the domain from offer ssl certificates?

That's the next step.  Usually you need a domain, and a CSR (see below), and a web service to respond from your DDNS address to get a certificate. 

https://knowledge.digicert.com/general-information/how-to-create-a-csr

What OS are you using?  

[keithsrobertson 10]

I posted a guide using ddns & ssl certs with my qnap server, but should be fairly similar for any nas:

 

[CowmanS77 1]

I was trying to use a reverse proxy at first, as I was told that's the only way it would work with DDNS, but not sure that's true.  The PKCS 12 cert I have been having a problem getting in that format.  My DDNS does have an SSL from Let's Encrypt, but cannot get it in the PKCS format. In fact, not sure how to get a copy of the actual certificate.  

Keith, I'll take a look at the guide. Thanks.

[CowmanS77 1]

Keith, my router generated the cert from Let's Encrypt for the DDNS automatically.  I think this is the step I am missing.  Because I don't have a file containing the cert, with the password, I have nothing to put in the Emby settings!  That's the missing link!

[Q-Droid 989]

To get relevant help you need to be more specific.

Router - what router make and model? If that were known then someone familiar with the router could tell you how to export the certificates and key you need to create the PKCS12 keystore for the Emby server. Or if that's even an option.

DDNS - Which service? Is it one you chose on your own or a provider supported and built in to your router? This could be one of the many third party DDNS providers or one associated with your router's brand. Which options you have depend on which DDNS service you're using.

Certs for Emby - There are many posts and help with this once you have the certs in hand.

 

Edited July 27, 2025 by Q-Droid

[jch 2]

I have accessed Emby through a reverse proxy at home for quite some time. I use Lets Encrypt SSL certs and all works well.  In my router (pfSense) I setup my reverse proxy (HA Proxy) to offload the encryption and then access Emby over port 80 internally.  So communication from my router in and out of the WAN is encrypted with the SSL cert.  Internally (in my home network) the communication is not encrypted.  I don’t have anything set up on Emby regarding SSL certificates.  
So for example, https://emby.myhomenetwork.com will go through the reverse proxy and access my Emby server with no problem.