Re:Free DDNS with Cloudflare and a Cronjob
by gunapologist99 on Saturday July 27, 2024 @02:58PM
(#41088543)
Aside from sibling comment, you also need automated DNS fiddling if you want CloudFlare Strict TLS support, because if LE can only connect to CF proxy, it will never issue via HTTPS.
[ Parent
| on HN ]
Re:Free DDNS with Cloudflare and a Cronjob
by jsheard on Saturday July 27, 2024 @03:02PM
(#41088568)
You don't necessarily need to do that, Cloudflare can generate you a long-lived certificate to install on your origin server which isn't publicly trusted but is trusted by their proxies, so it works with Strict TLS. YMMV with other CDNs though, you might need to fall back to using LE with a DNS challenge in some cases.
https://developers.cloudflare.com/ssl/origin-configuration/o...
Re:Free DDNS with Cloudflare and a Cronjob
by Arrowmaster on Saturday July 27, 2024 @05:00PM
(#41089304)
Not true. I have a CF rule that matches . well-known/acme-challenge and sets SSL off. The main setting is on full strict but the rule disables the auto redirect to https and the strict checking so an acme client behind a CF tunnel can bootstrap a cert with the HTTP-01 method.