Totally my mistake but perhaps these notes will help someone. I do this in thanks to your hard work as a contribution.
I originally setup Matomo on my web server as internal only using a self signed CA and certificate requiring a client certificate. Then I removed the client certificate requirement and thought I was done.
TLDR; added external DNS, obtained a letsencrypt certificate.
I looked while not logged in and saw this in the javascript console:
(index):376 GET https://matomo.homlish.net/matomo.js net::ERR_CERT_AUTHORITY_INVALID
Duh, I didn’t add the entry for external DNS. I added it with go daddy DNS manager.
Still got the error so I used https://www.ssllabs.com/ssltest/ to test the ssl. Sure enough, it is still the old certificate using the self signed CA. I grabbed a real one from letsencrypt and it started working.
Thanks again,
Paul