u/CakeAppropriate912

Hi guys,

I’m struggling with my Baïkal setup (running on Raspberry Pi) and Apple Calendar. I’ve reached a point where I need some expert eyes on my networking.

The situation: I’ve got Baïkal up and running. When I access the admin dashboard or the user link via browser (using the local IP), everything works fine. However, when I try to add the account to Apple Calendar (iOS), it starts throwing SSL errors. If I force it to save anyway, it just fails to connect and none of my calendars show up.

The setup:

• Raspberry Pi (Docker/Baïkal)
• Networking: I'm behind CGNAT, so I’m using NetBird for remote access.
• The goal: I need to sync my calendars smoothly whether I'm on my home Wi-Fi (192.168.x.x) or on the road (NetBird IP).

My questions:

1. SSL Fix: I suspect Apple is rejecting the connection because I’m hitting the IP directly without a valid cert. Will putting NGINX Proxy Manager in front of it solve this?
2. Certificates: Since I’m behind CGNAT and can't open port 80/443 for a standard Let's Encrypt challenge, can I use NPM with a DNS-01 challenge to get a proper certificate?
3. Unified Address: Is it possible to set it up so I use one "hostname" for both local and remote access without Apple Calendar losing its mind?

If anyone has a similar stack (Baïkal + NetBird + Apple devices), how did you handle the discovery and SSL part? Any config snippets for NGINX would be life saving.

Thanks!