ฝัง
- เผยแพร่เมื่อ 4 ส.ค. 2024
- Today, we'll be going through the entire process of purchasing a domain, setting up DNS, connecting to Cloudflare, connecting CloudFlare to NGINX Proxy Manager, and securing our traffic at every step via SSL and DNSSEC using a Cloudflare Origin certificate on our Unraid server.
Many comments asked for this video and required anyone using any reverse proxy to consider it an option.
Cloudflare is one of the most extensive networks operating on the Internet. People use Cloudflare services to increase their websites' and services' security and performance.
🔔 Subscribe for more tech tips and tutorials: @IBRACORP
👍 Like this video if you find it helpful, and tell us in the comments what other tutorials you'd like to see.
🚀 Timestamps:
0:00 - Introduction
2:42 - Pricing
3:31 - Why use Cloudflare?
8:49 - Purchasing a domain
10:27 - Setting up Cloudflare
18:37 - Create Origin Certificate
20:33 - Proxying an endpoint
21:40 - Installing our Origin Certificate
24:00 - Testing
24:30 - Analytics
📌 Follow us on social media for the latest updates:
Website: ibracorp.io/
Discord: / discord
Reddit: / ibracorp
Twitter: / ibracorp_io
Facebook: / ibracorp
💖 Support Us:
Your support helps us to keep producing high-quality tech tutorials and content. If you've found value in our videos, consider supporting us in the following ways:
PayPal: www.paypal.com/donate/?hosted...
Shop: shop.ibracorp.io/
Subscribe and share our videos with friends and colleagues.
Every bit of support makes a huge difference and enables us to continue delivering content that helps you make the most out of the latest technology!
For business enquiries, please email support@ibracorp.io
#cloudflare #cdn #ddos #ddns #cloudflarecdntutorial #cloudflareaccess #cloudflaresetup #cloudflaretutorial #cloudflaressl #configureunraid #ddosmitigation #howtousecloudflare #unraid #unraidtutorial #cdnwordpresscloudflare free vps fastly stock edge computing dns over https how to setup cloudflare cloudflare ssl - วิทยาศาสตร์และเทคโนโลยี
Thank you for watching our Cloudflare video! What do you think about Cloudflare? What does your environment look like? Let us know in the comments
Are you able to do a video on enabling HSTS and setting up Nginx Proxy Manager with it? The warnings on cloudflare indicate that you could lose connection with your website for months if you do it wrong.
portainer with docker + nginxproxymanager on my side
This video as well as a ton of your newer ones have been invaluable to me! Awesome content. I really appreciate the time that goes into these. Cheers!
Thank you Alex ❤️
I've been working my way through this series and improving my own setup with your suggestions. You have a gift for explaining things well without being too long-winded. Keep up the awesome work!
Thank you for the kind words Christian, absolutely stoked to hear you're enjoying them . Thanks for watching!
Very well done. I am really liking how you are explaining things and then go through it all! I really appreciate it.
HI Scott, thank you for coming back and giving you feedback. I do take it seriously and your previous feedback on Authelia made me create a new in depth video about it. It's recorded and have started editing so keep an eye out for that one soon!
Your content inspired me to rebuild my shoddy unraid server and I couldn't be happier with how its turned out! Thanks so much!
Glad to hear it mate! Pleasure to have helped you on your journey 🙂
man I needed your guides a year ago! Awesome guides, super clear and easy to follow!
Thanks Thomas, maybe one day I can do a video on travelling back in time so I can help you earlier. Thanks for watching!
Dude, thank you so much. Thanks to this video I was able to securely install NextCloud on my unRAID server!
This is awesome!! It actually worked!! Thank you. I finally can use my server without a vpn all the time. You rock!
From one Aussie to another, thanks mate. I've been running letsencrypt + my domain for a while now and I didn't realise how easy it is to go down the CloudFlare path. I'll definitely be looking into this myself in the next few days.
It's also nice hearing the Aussie pronunciation for "cache", I don't hear it very often outside my circle of friends.
Thank you mate really appreciate the feedback! I'm actually wrapped to hear some Aussies are here too so I'm not alone. Stay tuned for more
@@IBRACORP Not a problem. I've got it all set up and working perfectly after watching your video. Which was a painless 20 minutes to switch from LetsEncrypt to NPM+Cloudflare whilst keeping my domain name all intact. Keep these sorts of guides coming, you're very clear and concise, you've also got a new subscriber. (Those Cloudflare analytics are super cool too).
Thank you very much for another great video. Great stuff indeed. Between you and Spaceinvader One, I have learnt so much and both your videos are informative, detailed and easy to follow.
Great video! Very easy to follow!
You have a great channel! I hope it keeps on growing!
Thank you Luiz, appreciate the feedback!
Thank you! Very easy to follow.
The only question was about the dynamic Ip, but i saw your comment up there. Following you for next videos
Thanks mate I will do a follow up on dynamic very soon
Wow I’ve been doing this stuff for a long time and this video explained some high level stuff I’ve always struggled understanding in an easy to get manner. Well done!
Cheers Danny appreciate the feedback 🙂
Great stuff mate, thanks for explaining this, very clear and easy to follow, much appreciated.
Thanks Paul, appreciate the feedback and for stopping by. Looking forward to putting more out there !
Thanks for alle the great Unraid videos!! Very nice!
Not sure how I missed this video - but fills in quite a few gaps. Much appreciated!!
Thanks Julian!
I watch this video every 3 months every-time I setup a new project 😂 this video is so good for those who like to setup their own services for free
Many thanks for this video. It was as instructive and enjoyable to watch, you have made a complicated topic easy to digest and you cared to explain some things so it's not just a "click here do that".
I have mine setup similar to yours except I decided to place NPM in a Linux container (lxc) on Proxmox. I didn't want to put all my eggs in one basket when it came to my unRAID server. Which video to you talk about setting up a "custom network" for your docker containers in unRAID. Thank you for your time and effort on these videos. They are priceless!!!
Hey Brother thanks for the comment and for watching. That's always a great idea and I always recommend seperating things as much as possible within your means so good thinking there.
For custom dock network it's in this video at 4:09 mark th-cam.com/video/kw_pohbKE3Y/w-d-xo.html
Thanks for the feedback!
Fantastic series man, loving it all. Thank you so much for the help!
Thanks for watching 🙂
This is great! :)
very nice video. Instrutive and precise information. keep it up!
Best tutorial on cloudflare ever ! . I owe you a thousand THANKS .
Our pleasure! Thanks for watching
Great video! I used this video to help me finish configuring nextcloud
GREAT!!! You are the best! Very simple and works like a pro!
Absolutely the best tutorial on this subject! solved soooo many of my problems
Thank you for watching!
your videos have really helped get my media setup up and running. thanks for all the videos!
Thank you very much, glad to help!
thanks i enjoyed the video and hopefully learned a few things i can implement to my setup.. looking forward to watching other videos from you .. thanks from a fellow Aussie :)
Thanks mate great to hear, hope you enjoy the rest of our videos 🙂
Great tutorial. I have learned much how to secure my connection. Thank you.
Thanks heaps for this. I thought this would be way more of a pain than it was.Set it up this morning, thanks to you!
My pleasure thank you for watching!
F'n dope tutorial man. Thankyou for the clear and detailed tutorial!
Thank you ❤️
Looks like this is what I'm doing next, hadn't realised it was actually so simple
Thanks for watching. Yeah it's pretty straightforward once it's mapped out. Glad it helped, cheers
thank you so very much for this guide. It has saved my sanity.
U got a very calm approach of explaining things easy to understand and follow... thanks +1sub
Awesome, thank you! Appreciate your time :)
Awesome video as always! Please make a video of enable HSTS :) Kepp up the good work!
Thanks a lot, i got it working with IPV6 coz my ISP's IPv4 is a CG-NAT. All I had to do was instead of A record I added AAAA record and thats it. Thanks again.
Thanks for the tip! That's a great workaround
That was really helpful, thanks!
Very welcome! Thanks for watching
Thanks for the cloudflare vid, helped me test out moving from Swag, did not know about the origin Cert, just looking at testing free IPA
My pleasure Peter thank you for watching. I also have a FreeIPA video if you haven't seen yet
Thanks for all the info mate!!
Any time!
Great video! Pro Tips:
1) if you are using Unraid and using a custom network you will need to switch those other docker containers to the br0 network as well, OR changing the Settings->Docker->"Host access to custom networks" setting to "Enabled".
2) If your receiving error 522: make sure your SSL settings in CloudFlare (domain > SSL tab on your left) is set to "full", this is defaulted to "flexible".
Thanks for the tips!
Thanks, this fixed my issue. Such an easy error to make.
Thank you for this great video.
Great guide.
Hey all. Trying to get this done but keep getting 522 (Connection timed out from Cloudflare side.. Any ideas what went wrong?)
nice video, great to see more Aussies!!
Cheers Sam!
Thanks for this video. So helpful
Glad it was helpful!
Brilliant Tutorial! Thank you
Thanks for watching!
Excellent! Now understand CF a bit better! And, yes, I was definitely exposed...
"put the ip of our server in" ive been searching for hours and cant figure out what you mean i do this and get an error
mate that was brilliant thanks a lot
Cheers Owen!
I learned the hard way of what not to do. I thought that my obscure corner of the interwebs was unknown and untouchable. Big mistake.
I wont expose anything without end-to-end encryption or a vpn. Other Content Creators do an excellent job creating howto’s but it blows my mind when they throw a nextcloud (or similar file sharing ) tutorial on YT and don’t even recommend E2E or other threat mitigation methods.
You’re doing the Lords work performing a service for humanity.
Thanks for this!
No worries thanks for watching Orian!
Another big thumb! This series is like a box set you can't put down...... Can you keep them coming fast enough??? Respect....
I'll sure as hell try!
Im trying to follow your video but at which point do you setup a service to point the domain towards your home IP adress? Or are IP adresses in australia static per default? Mine is changing sometimes so I need a DynDNS setup of some sort, right?
Great video! I was using LetsEncrypt certificates from NPM, but it looks like Cloudflare auto renews the certificate for you. Very easy to implement using the steps in your video, subscribed!
Glad it was helpful! Thank you for your support
Hey mate, just came across your channel a few weeks ago and it's fantastic. Unraid and most of your vids have been a good reflection of my setup so far. Have been watching SI1's vids for the last few years but great to see some local representation! Quick question though, i'm exposing some services via NPM and duckdns, although I have a static IP (I just use duckdns for the hostname). Is there a way to mask your public IP (similar to Cloudflare) without owning a domain? Or do I have to buy one? Cheers
Thanks for watching Joel, glad you like them! To my knowledge mate I don't think so but I could be corrected. It's cheap to own a domain these days if you wanted one
At 11.44, even though you mention to put in the ipv4 address number, you filled in the name. Do you have a dynamic ip address and behind ibracorp is a dynamic ip address linked with a ddns service?
If you actually put there a number in the ipv4 field what do you put in for the name field?
you are the best man!
Shukran Saif! Salam from Australia
@@IBRACORP 🙉 jaws dropped. Afwan from Dubai
Thanks!
Thank you for your support 🙏
Hello @ibracorp . Thank you so much for all the videos.
I have a doubt, in minute 11:45 when adding de A recod to cloudflare, what is de ip address? is it my duckdns name? if not, how can I get it? (sorry for my noobness) Thank you!
Heya, I can't seem to find the video that shows the Let's encrypt certificate part? I am unable to add the certs to Nginx without adding the Let's encrypt first.
thank you very much!
Thanks for watching
Late to the party on this video but love it, couldn't have set this up without help.
Issue: when i try to set up full strict and generate the certificate then add it to my certificates and proxies they just will not work, with a cloudflare error page stating the origin cert didn't match. tried invalidating and regenerating the key multiple times, but no go.
Question: any idea what i have set incorrect (following your video, even domain transferred to google to ensure it was like for like) to cause this?
Where have you been ?, great vid
Sorry if this has already been asked, but if I set this up is it going to mess up my OpenVPN server that is running on my router?
My domain has some preconfigured A, CNAME records from the website that i bought it from. Do i need to delete them? With my current setup i have some dns records in cloudflares editor and some on the domain providers website, i get a "connection timed out error code 522" when trying to access my server.
Awesome!
Glad you think so! Thanks for watching
Hi Mitch, I can see a notification with your comment about a shout out but doesn't seem to be showing me the comment so I can click the link. Any chance you could email it? support@ibracorp.io
Hi. I setup cloud flare on our production environment. Cloud flared is running on Unraid and we have an Argo tunnel configured. We would like to setup cloud flared on multiple machines ie windows servers, so that our tunnel gets the benefits of multiple connections and redundancy. I see a lot of tutorials showing how to do this by creating new tunnels. Id like to see a tutorial on how to achieve this to duplicate our existing tunnel across different machines as a backup to the Unraid install of cloud flared.
Thank You, Keep up the excellent tutorials..Your my go to for all production deployments..
Butch
Is it possible to redirect traffic to the server for which we do not own the ip for instance to amazon s3 or some similar service?
Questions, does this mean that Cloudflare terminates your Origin SSL then re-encryptes with the edge certificate?
Sa here!
Anyone know which silly mistake I did to follow this video to the letter and then visiting my domain and get a good old: Invalid SSL certificate Error code 526 ? it says the certificate is from letsencrypt and lets assume cloudflare use that to issue you a certificate for your origin cert like in the video, what's next?
Hey, very good video, thanks for your work... but i have a problem with it, you show for the SSL to bring in NGENX there are a Key and a Pem, but i cant find the key ? the Pem, PKCS#7 and DER and no Key, what is the work around this little problem ?
Benn loving your videos - however, I can't find a solution around my CGNAT - I've tried these steps, but maybe I'm missing something? I have been using zerotier just fine, but Ideally, I'd like to get to a point where I can just use one of the many domains I own and utilize their subdomains...
Do you know of any IT/pc-parts inventory web interface application in docker ????
Thanks for this! I've been following along and everything has worked up until the testing of overseerr. When I click on the website I get an "Error 1002 DNS points to local or disallowed IP". How do I resolve this?
Any idea why I get this error when adding record pointing to server IP address? DNS Validation Error (Code: 1004) This record type cannot be proxied.
i get a "DNS Validation Error (Code: 1004) This record type cannot be proxied." when trying to add my server ip. If i toggle off proxy it works but doesnt that defeat the purpose of security? Your help is much appreciated!
I followed exactly as you did in this video as well as your nginx video but I get a 502 error when accessing the domain
Great video, love the content you are putting together. Based on your advice I went to implement DNSSEC however my Australian based hosting doesn't support it. Could you suggest an Aussie web hoster that supports DNSSEC I should be using with Cloudflare?
Thanks for sharing! Is there any reason it has to be "aussie" mate? Google works well for me. But if it's a must, I did a quick search and found VentraIP and DigitalPacific offer it. But I can't vouch for them as I haven't used personally.
SO i folloed your guide but when I go to the URL it brings me to my tower unraid login. Both the overseerr one and the main URL. How do i fix this?
when ever i try to test it goes to my unraid server and not the docker container. Can someone help me figure out where i went wrong?
when I try to set up overseerr doing this, it just takes me to my unraid login page. Any idea what may be wrong?
Ok guys I was on swag and cloudflare about a year but I wanted to add custom certificates from cloudflare. After setup from your video (thanks by the way) I have problem with my site because it says certificate is not valid. On let’s encrypt it goes great without problem. Is there some workaround?
I've followed everything but Cloudflare shows Host error when I try to access my overseerr remotely. Locally it is up and running. Not sure how to debug
I've gotten as far as uploading the custom certificates, but when I try to access the site through NGINX I keep getting a 526 error, or a redirect to my root domain. I'm not even sure what to troubleshoot at this point
Hello I'm stuck on the step where you add your IP address for the server (minute 11:45). When I enter the IP address for my server I get the following error from cloudshare: Target {IP Address} is not allowed for a proxied record. (Code: 9003) I've n ever done anything like this so I'm not sure how to fix it.
Sadly my attempt to follow failed. As i've no idea if i need to open ports in the router or what, added certificates to nginx, using xbackbone as the image host, gave it my domain, but still can't connect to the thing.
thanks much appreciated
You're welcome thanks for watching Nate
@@IBRACORP I ve bookmarked some of your videos, and I check them every time I need to deploy a website. Best content, thanks!
Appreciate you mate thank you ❤️
Thank you so much for your tutorial, it’s very clear.
However I wonder, why use Nginx in addition, when you already have a secure path with Cloudflare Tunnel ?
How do I use a wildcard certificate on the main panel? With nginx proxy manager
12:10 What’s the difference between the www, domain, and @ A records, aren’t they the same?
Muchas gracias por la ayuda
Awesome video, however I'm getting an Error code 502 "Bad Gateway" from Cloudflare. I'm not sure how to fix this. Any suggestions?
do i need any kind of port forwarding on the actual router?
great video as always. Can you please point out where can i find guidance regarding setting up the email aliases etc.... Regular google account not a workforce one. Thansk
Great Video! Any chance to use access lists with this setup?
Anyone know how to make this work with cloudflared tunnel? I'm getting bad gateway after following instructions.
I havnt looked around yet, but is there a version of this for use without a domain name (true $0.00 setup)
If possible a setup utilizing duckdns and swag (already been through your swag video)
what did i do wrong if the link just takes me to my unraid web gui?
Great video. I got as far as the CNAME but cannot connect to either qbit or jellyfin. Tried with and without https. Any suggestions? Regardless, thanks for the video!
Hi Great video and followed a few without problems, can i ask when you purchase the domain how did you obtain the ip address? As i have a domain which i purchase only used for personal emails. This has been Activated on CloudFlare but i cannot A record the domain as i don't have an IP associated with it , is there a solution?