Minimal Setup Home Assistant Guide

[PixelShober]

Hey there, guys!
Since I struggled a bit with setting up this configuration on my Home Assistant, I want to provide an exact guide with different options to help others facing the same problem.

What doesn't work (which I thought would):
Avoiding the Shine app setup entirely by setting up a DNS rewrite from mqtt.growatt.com to the local HA IP address, but you will get a certificate/TLS handshake error.

### What works as a minimal setup:

ShinePhone App
Install the ShinePhone app (https://play.google.com/store/apps/details?id=com.growatt.shinephones&hl=de) and use the installer code: EDSNK6 and scanning the barcode (not the QR code) on the Growatt device.
Configure your datalogger in the ShinePhone app (My device list -> Datalogger -> Configure -> Advanced menu -> Server settings tab -> Password: "growatt"

Server domain name/IP: Here, you have two options: either a subdomain (DuckDNS, Cloudflare, etc.) or the IP address (the certificate still works with a local IP).
Advantage of the IP: You don't need to set any ports in your router since the Growatt device traffic goes directly through your IP.
Personally, I used a subdomain of my Cloudflare address and redirected it internally with AdGuardHome to my IP address (DNS rewrite).
You can use port 7006 or 8883. I stuck with 8883 because I didn't want to change my MQTT broker settings for other integrations.

Creating a certificate:
In Home Assistant, there are multiple ways to do this.
I used Let's Encrypt with my Cloudflare domain, but you can also use DuckDNS or other tools.
Create an RSA certificate, not an ECDSA certificate.

Mosquitto Broker:
Create two logins:
Creating two logins (GroBro Add-on and Growatt Device) helped me debug some errors more easily.
For the Growatt device user, choose the SN as the username and "Growatt" as the password.
You can create them directly in the config tab; there is no need to set them up as users.
You can create them directly in the config tab no need to set them up as a user or so.
Keep your MQTT SSL Port the same as in the ShineApp (7006 or 8883) .

Example Config:
logins:
username: QMNXXXXXXXXX
password: Growatt
username: GroBro
password: YOURSTRONGPW
require_certificate: false
certfile: fullchain.pem
keyfile: privkey.pem
customize:
active: false
folder: mosquitto

GroBro Addon
Example Config:
SOURCE_MQTT_HOST: homeassistant.local
SOURCE_MQTT_PORT: 1883 (no need for TLS)
SOURCE_MQTT_TLS: false (no need for TLS)
SOURCE_MQTT_USER: GroBro
SOURCE_MQTT_PASS: YOURSTRONGPW
TARGET_MQTT_HOST: homeassistant.local
TARGET_MQTT_PORT: 1883 (no need for TLS)
TARGET_MQTT_TLS: false (no need for TLS)
TARGET_MQTT_USER: GroBro
TARGET_MQTT_PASS: YOURSTRONGPW
HA_BASE_TOPIC: homeassistant

I hope this helps some people!

Best regards