domain
My domain name is registered on namecheap and then managed by cloudflare. When I follow the documentation, domain is set to Full (Strict) mode in Cloudflare.
In Dokploy, select Let's Encrypt and enable HTTPS.
It doesn't work and returns Invalid SSL certificate, but when I change the domain to Full, the website comes back to work.
17 Replies
I donโt know if setting it to Full will have any other effects, because this setting is different from the documentation. Could you please explain it?
Full or full strict is same donโt worry about it
Why don't use the certificates from cloudflare?
Are you creating one here? I donโt know much about cloudflare
No, go to Overview
and select Flexible
I have selected Flexible, does dokploy need to be modified?
The website cannot be opened after selecting Flexible.
yeah, in the certificate select none and disable https
I still canโt open the website. I didnโt find your method of operation in the documentation. Can you provide specific reference documentation?
did you have enabled Flexible Mode in cloudflare and in the domain did you select the certificate
None and disable HTTPS?Yes, I have configured it as you said
Ok can you share the logs of your application?
I solved it. I did not open port 80 of the server. I only opened port 443 before.
What are the benefits of configuring this way compared to the full way I used above?
Well,
Flexible: it will only encrypt the data from the browser and the client but not on your server
Full(Strict): Require to be on full encryption mode end to end, Origin and Server
Is more easy to use flexible because you don't need to do anything, but in the case you want more security use Full(Strict)
I understand that using Flexible allows me to avoid maintaining certificate expiration issues.
Correct, but using letsencrypt is done automatically also, so you are safe in both sides
but with flexible you have less headache because you never to be worried about if the letsencrypt didn't generate your certificate at the time or something
Thank you for your patient answer, I understand.
๐ฏ