Help with SSL Cloudflare

[3dcadmin@lemmy.relayeasy.com]

You want to use flexible ssl/tls for starters, doubtful it will work otherwise. Log in to cloudflare, choose domain, then SSL/TLS and see if encryption is set to flexible. See what that gets you, though it can take 15 mins for effects to show up. As long as the server can be reached cloudflare will try and match a certificate so lemmy gets served, as long as the server is set up correctly and the ports etc. are correctly forwarded and open

[cutebc24@piefed.social]

I'm using it to set a tunnel, and lemmy instance is yunohost. since my domain is on porkbun, it says now "parked on the bun"

[cutebc24@piefed.social]

I have, thanks, now it shows "parked on the bun"

[jacksquat@what.forfi.win]

Set the SSL mode to "Full".
Then go to "Rules" and create three rules. This is also the order in which they should be processed:

1.
Name: lemmy u all
Custom filter expression: URI path equals /u/*
All other options disabled.

2.
Name: lemmy nodeinfo all
Custom filter expression: URI path equals /nodeinfo/*
All other options disabled.

3.
Name: lemmy inbox all
Custom filter expression: URI path equals /inbox/*
All other options disabled.

This should get your instance running behind Cloudflare's tunnel.

*edited for formatting

[cutebc24@piefed.social]

What do I put for "rule type" on Cloudflare? ex: redriect or route request, transform request/response, modify configurations

[jacksquat@what.forfi.win]

Oops sorry about that, you want them all as configuration rules

[rheumatoidarthritis@mander.xyz]

What is porkbun, your hosting provider?

[cutebc24@piefed.social]

The site I bought the domain at :3

[cutebc24@piefed.social]

Thanks

[jacksquat@what.forfi.win]

Hope it helped!

[cutebc24@piefed.social]

what action do i put, i put ssl, idk

[cutebc24@piefed.social]

but maybe not because it still says the handshake failed

[jacksquat@what.forfi.win]

I've left all of the actions off

[cutebc24@piefed.social]

oh, how do u do that? it says i must have an action

[cutebc24@piefed.social]

action parameters are required for the set_config action

[jacksquat@what.forfi.win]

So sorry, it's been a while....
Add the following actions:

1. Browser integrity check (Then turn off)
2. Disable RUM
3. Disable Zaraz
4. Email Obfuscation (Then turn off)
5. Fonts (Then turn off)
6. Hotlink Protection (Then turn off)
7. Opportunistic Encryption (Then turn off)
8. Rocket Loader (Then turn off)

[cutebc24@piefed.social]

Thanks so much!! This will totally help me and I'll tell u the results

[cutebc24@piefed.social]

the domain says parked

[rheumatoidarthritis@mander.xyz]

I think you pointed Cloudflare DNS records at the wrong thing. You can PM me if you're afraid to post details here but you should point Cloudflare at your hosting provider, or your home IP if you're hosting at home, not the place where you bought the domain.

[3dcadmin@lemmy.relayeasy.com]

So just got back to this... so if it is parked on the bun you need to change the nameservers at cloudflare to actually get the domain to work. Without that step cloudflare can't do much with it. Cloudflare will tell you your own personal cloudflare nameservers, porkbun will have set them to theirs, so firstly find out what the nameservers are set to in cloudflare. Work through this guide

https://developers.cloudflare.com/dns/zone-setups/full-setup/setup/

Once cloudflare has the nameservers and they are resolving, which can take 24 hours, you can then route through your tunnel or whatever...