Cloudflare Developers•10mo ago

Does HTTP Strict Transport Security (HSTS) mean that I have to have a certificate installed on my se

Does HTTP Strict Transport Security (HSTS) mean that I have to have a certificate installed on my server?

DD5 X is now using cloudflare

WTDawson9OP•3/10/25, 7:30 PM

No they're not?

WWTDawson9 Does HTTP Strict Transport Security (HSTS) mean that I have to have a certificat...

Chaika•3/10/25, 7:31 PM

means you need https and http is disallowed

WWTDawson9 No they're not?

Chaika•3/10/25, 7:32 PM

they switched a bunch of regions today, maybe still a few without CF or not using the full cdn, but lots of Server: cloudflare

CChaika they switched a bunch of regions today, maybe still a few without CF or not usin...

WTDawson9OP•3/10/25, 7:35 PM

Alright fairs

CChaika means you need https and http is disallowed

WTDawson9OP•3/10/25, 7:35 PM

But I don't have to install the certificate on my server?

Chaika•3/10/25, 7:36 PM

"the certificate"?

CChaika "the certificate"?

WTDawson9OP•3/10/25, 7:36 PM

SSL/TLS that Cloudflare give me

Chaika•3/10/25, 7:37 PM

HSTS mandates https. Browsers have a list of trusted root CAs, you need to serve a certificate signed by one of those to visitors.
Without Cloudflare, this means one of them directly, like Let's Encrypt
With Cloudflare in the middle, you should either use a trusted CA directly like Let's Encrypt, or you can use a Cloudflare Origin Cert, either will work

WTDawson9OP•3/10/25, 7:37 PM

Hmm

jjjrmy•3/10/25, 10:35 PM

with a Cloudflare Worker, if I need to include my Firebase JSON Config - how do I handle that if it's not imported directly in my worker script?

does it have to be uploaded as an asset with a binding?

MattIPv4•3/10/25, 10:36 PM

How is the code in your worker expecting to access said config?

jjjrmy•3/10/25, 10:38 PM

I'm not really sure tbh - right now we are using Express just on a normal Node app and it's reading the filepath with

fs

fs

jjjrmy•3/10/25, 10:39 PM

but I don't really think I want to store the unencrypted file in R2?

jjjrmy•3/10/25, 10:42 PM

I guess that's the only option?

Jjjjrmy but I don't really think I want to store the unencrypted file in R2?

valkyrie_pilot•3/10/25, 10:44 PM

cloudflare workers support a way to have secrets

Vvalkyrie_pilot cloudflare workers support a way to have secrets

jjjrmy•3/10/25, 10:44 PM

so you think just save the JSON as a secret

valkyrie_pilot•3/10/25, 10:45 PM

i don't see why not

jjjrmy•3/10/25, 10:47 PM

okay will try that

Shawn•3/11/25, 3:09 AM

Can anyone help out with this? I’m trying to get my USDT wallet balance. I’m trying to see if there is a different web3 I can go to?

Peps•3/11/25, 3:25 AM

you'll have to reach out to the website's owner if their site is unable to load

MS•3/11/25, 4:43 AM

Hello I'm new to R2, I see egress is free in R2, but it was also mentioned it will be charged if the data is downloaded to a third-party can someone help me understand this ?

Hadgimoto•3/11/25, 7:22 AM

Hows everyone doing this evening? I'd appreciate some help if anyone has a few minutes to spare?

Hadgimoto•3/11/25, 7:22 AM

Cloudflare dashboard stuck on ‘Pending Nameservers’ even though the setup is correct. Domain is registered here, but verification won’t complete. Any ideas?

HHadgimoto Cloudflare dashboard stuck on ‘Pending Nameservers’ even though the setup is cor...

Laudian•3/11/25, 8:33 AM

What's the domain?

SShawn Can anyone help out with this? I’m trying to get my USDT wallet balance. I’m t...

D5•3/11/25, 8:44 AM

The website server is down. Not Cloudflare's issue

NNova+"Cloudflare Pages has a soft limit of 100 projects within your account in order ...

Walshy•3/11/25, 8:46 AM

yes, it's a soft limit.

Walshy•3/11/25, 8:46 AM

If you need more you can ask for it to be removed.

WWalshy Workers doesn't have prod/preview environments today

Vikash•3/11/25, 10:31 AM

rita says, it's coming soon...thanks

https://x.com/ritakozlov_/status/1899402252533576015

rita kozlov 🐀 (@ritakozlov_) on X

@wongmjane @Cloudflare there are plans! team is working on couple other things right now but this is in the queue and should be coming in the next few months

•

3/11/25, 10:09 AM

D5•3/11/25, 12:02 PM

Why there's a huge spike in Cloudflare radar traffic?

DD5 Why there's a huge spike in Cloudflare radar traffic?

Chaika•3/11/25, 12:27 PM

Fortnite update most likely, caused the same spikes before

CChaika Fortnite update most likely, caused the same spikes before

D5•3/11/25, 12:31 PM

Makes sense

Original message was deleted

database•3/11/25, 1:16 PM

Mozzy•3/11/25, 1:41 PM

Anyone tried setting up the Sentry integration for a Worker recently?
CF API is returning a 500

Peps•3/11/25, 1:44 PM

hm seems to work for me

Peps•3/11/25, 1:44 PM

tried reconnecting sentry?

Peps•3/11/25, 1:45 PM

If you're able to consistently repro it, even when reconnecting Sentry, can you open a #workers-help thread and ping me? I'll try to poke someone then

Mozzy•3/11/25, 1:48 PM

Mozzy•3/11/25, 2:25 PM

FYI @Peps ^
Some more info in there

R1CH•3/11/25, 5:03 PM

Any network guys on? I've been running into issues with CF's IPv6 load balancing for GitLab SSH for months and it's a lot of back and forth and waiting between me, GitLab and Cloudflare. Would be happy to work with someone directly to get this fixed.

jackobsn•3/11/25, 6:29 PM

Hi i have a basic question , we use Cloudflare pages free plan , we have a static website (some images, some basic JS). We will be running a promotion with potential of very high traffic. Is the free plan really enough to handle all possible traffic demands. We would gladly pay for a "package" or additional traffic just so the website is stable. But it seems it is not necesary , is this really true ?

Walshy•3/11/25, 6:34 PM

free plan can handle whatever you want to throw at it

Chaika•3/11/25, 6:35 PM

Pages gets faster the more requests you throw at it, the more stuff is in cache at any one of the hundreds of locations

jackobsn•3/11/25, 6:40 PM

Still my mind has a hard time procesing that we are geting this service for free that aws wanted to charge us roughly 15k per month (if the promotion is a sucess)

jackobsn•3/11/25, 6:41 PM

Definitely made me a customer for life for any future projects

Deadwood•3/11/25, 6:48 PM

hey guys!
I'm new here, and I'm a chatgpt user (I know I know I'm illiterate in this world) with a specific problem.

My client wants me to host some 3k images so they can use the links for a bulk upload to their website.
I've asked AI to help me solve this issue and the AI suggested Cloudflare!

I was able to create an account and to upload a portion of the images, make them publically available.
Where I'm stuck with is locating my account ID.

Any kind soul could point me in the right direction?

Jjackobsn Still my mind has a hard time procesing that we are geting this service for free...

Erisa•3/11/25, 6:48 PM

cloudflare and aws make their money in different ways, the way cloudflare operates happens to benefit free users very well

Erisa•3/11/25, 6:49 PM

i believe the most recent explanation of this principle is here https://blog.cloudflare.com/cloudflares-commitment-to-free/

The Cloudflare Blog

Reaffirming our commitment to free

We want to make abundantly clear: our free plan is here to stay, and we reaffirmed that commitment this week with 15 releases across our product portfolio that make the Free plan even better.

DDeadwood hey guys! I'm new here, and I'm a chatgpt user (I know I know I'm illiterate in...

Chaika•3/11/25, 6:50 PM

There's no publicily documented endpoints for interacting with objects/files in buckets, so whatever way it's steering you down is probably not right

Does HTTP Strict Transport Security (HSTS) mean that I have to have a certificate installed on my se

Similar Threads

Similar Threads

Similar Threads