Are you able to do a video on enabling HSTS and setting up Nginx Proxy Manager with it? The warnings on cloudflare indicate that you could lose connection with your website for months if you do it wrong.
I've been working my way through this series and improving my own setup with your suggestions. You have a gift for explaining things well without being too long-winded. Keep up the awesome work!
From one Aussie to another, thanks mate. I've been running letsencrypt + my domain for a while now and I didn't realise how easy it is to go down the CloudFlare path. I'll definitely be looking into this myself in the next few days. It's also nice hearing the Aussie pronunciation for "cache", I don't hear it very often outside my circle of friends.
@@IBRACORP Not a problem. I've got it all set up and working perfectly after watching your video. Which was a painless 20 minutes to switch from LetsEncrypt to NPM+Cloudflare whilst keeping my domain name all intact. Keep these sorts of guides coming, you're very clear and concise, you've also got a new subscriber. (Those Cloudflare analytics are super cool too).
Great video! Pro Tips: 1) if you are using Unraid and using a custom network you will need to switch those other docker containers to the br0 network as well, OR changing the Settings->Docker->"Host access to custom networks" setting to "Enabled". 2) If your receiving error 522: make sure your SSL settings in CloudFlare (domain > SSL tab on your left) is set to "full", this is defaulted to "flexible".
I have mine setup similar to yours except I decided to place NPM in a Linux container (lxc) on Proxmox. I didn't want to put all my eggs in one basket when it came to my unRAID server. Which video to you talk about setting up a "custom network" for your docker containers in unRAID. Thank you for your time and effort on these videos. They are priceless!!!
Hey Brother thanks for the comment and for watching. That's always a great idea and I always recommend seperating things as much as possible within your means so good thinking there. For custom dock network it's in this video at 4:09 mark ru-vid.com/video/%D0%B2%D0%B8%D0%B4%D0%B5%D0%BE-kw_pohbKE3Y.html Thanks for the feedback!
Many thanks for this video. It was as instructive and enjoyable to watch, you have made a complicated topic easy to digest and you cared to explain some things so it's not just a "click here do that".
I learned the hard way of what not to do. I thought that my obscure corner of the interwebs was unknown and untouchable. Big mistake. I wont expose anything without end-to-end encryption or a vpn. Other Content Creators do an excellent job creating howto’s but it blows my mind when they throw a nextcloud (or similar file sharing ) tutorial on YT and don’t even recommend E2E or other threat mitigation methods. You’re doing the Lords work performing a service for humanity.
HI Scott, thank you for coming back and giving you feedback. I do take it seriously and your previous feedback on Authelia made me create a new in depth video about it. It's recorded and have started editing so keep an eye out for that one soon!
Hello @ibracorp . Thank you so much for all the videos. I have a doubt, in minute 11:45 when adding de A recod to cloudflare, what is de ip address? is it my duckdns name? if not, how can I get it? (sorry for my noobness) Thank you!
Thank you so much for your tutorial, it’s very clear. However I wonder, why use Nginx in addition, when you already have a secure path with Cloudflare Tunnel ?
Thanks a lot, i got it working with IPV6 coz my ISP's IPv4 is a CG-NAT. All I had to do was instead of A record I added AAAA record and thats it. Thanks again.
Great video! I was using LetsEncrypt certificates from NPM, but it looks like Cloudflare auto renews the certificate for you. Very easy to implement using the steps in your video, subscribed!
Wow I’ve been doing this stuff for a long time and this video explained some high level stuff I’ve always struggled understanding in an easy to get manner. Well done!
Hey i know this is an old video but ive been watching through a bunch of your videos and theyre really great and easy to understand. Im setting up nginx but i already ahve port 80 forwarded to another nas. Can I set it up to use another port?
Hey mate, just came across your channel a few weeks ago and it's fantastic. Unraid and most of your vids have been a good reflection of my setup so far. Have been watching SI1's vids for the last few years but great to see some local representation! Quick question though, i'm exposing some services via NPM and duckdns, although I have a static IP (I just use duckdns for the hostname). Is there a way to mask your public IP (similar to Cloudflare) without owning a domain? Or do I have to buy one? Cheers
Thanks for watching Joel, glad you like them! To my knowledge mate I don't think so but I could be corrected. It's cheap to own a domain these days if you wanted one
Im trying to follow your video but at which point do you setup a service to point the domain towards your home IP adress? Or are IP adresses in australia static per default? Mine is changing sometimes so I need a DynDNS setup of some sort, right?
Thank you very much for another great video. Great stuff indeed. Between you and Spaceinvader One, I have learnt so much and both your videos are informative, detailed and easy to follow.
Great video, love the content you are putting together. Based on your advice I went to implement DNSSEC however my Australian based hosting doesn't support it. Could you suggest an Aussie web hoster that supports DNSSEC I should be using with Cloudflare?
Thanks for sharing! Is there any reason it has to be "aussie" mate? Google works well for me. But if it's a must, I did a quick search and found VentraIP and DigitalPacific offer it. But I can't vouch for them as I haven't used personally.
Hi. I setup cloud flare on our production environment. Cloud flared is running on Unraid and we have an Argo tunnel configured. We would like to setup cloud flared on multiple machines ie windows servers, so that our tunnel gets the benefits of multiple connections and redundancy. I see a lot of tutorials showing how to do this by creating new tunnels. Id like to see a tutorial on how to achieve this to duplicate our existing tunnel across different machines as a backup to the Unraid install of cloud flared. Thank You, Keep up the excellent tutorials..Your my go to for all production deployments.. Butch
This looks simple enough, however one question I have is regarding dynamic IP's... I believe the average user does not have a static IP at home, and as result after they get a new IP, they'll have to go back into the Cloudflare dashboard, and update the A record for www to point back to their new IP would they not?
Hi Blake you are in fact correct and I should have mentioned this. My apologies. If anyone is coming to see this now I would recommend spaceinvaderones video where he discusses duckdns as solution to this. I didn't want to add that here as it can lead to confusion. Thanks for the feedback really appreciate it
Benn loving your videos - however, I can't find a solution around my CGNAT - I've tried these steps, but maybe I'm missing something? I have been using zerotier just fine, but Ideally, I'd like to get to a point where I can just use one of the many domains I own and utilize their subdomains...
Late to the party on this video but love it, couldn't have set this up without help. Issue: when i try to set up full strict and generate the certificate then add it to my certificates and proxies they just will not work, with a cloudflare error page stating the origin cert didn't match. tried invalidating and regenerating the key multiple times, but no go. Question: any idea what i have set incorrect (following your video, even domain transferred to google to ensure it was like for like) to cause this?
thanks i enjoyed the video and hopefully learned a few things i can implement to my setup.. looking forward to watching other videos from you .. thanks from a fellow Aussie :)
great video as always. Can you please point out where can i find guidance regarding setting up the email aliases etc.... Regular google account not a workforce one. Thansk
Great video. I got as far as the CNAME but cannot connect to either qbit or jellyfin. Tried with and without https. Any suggestions? Regardless, thanks for the video!
Your videos are great, watched a couple of them! But how can you be interested in security and privacy and use Google Products, that's a bit odd to me :)
At 11.44, even though you mention to put in the ipv4 address number, you filled in the name. Do you have a dynamic ip address and behind ibracorp is a dynamic ip address linked with a ddns service? If you actually put there a number in the ipv4 field what do you put in for the name field?
Nice tutorial @Ibracorp. You got a new subs ;) What if I want to have SSL certificate for all my internal servers/services, but I don't want to expose to the Internet ?
Thank you for subscribing :) Hmm if you definitely don't want to expose it out I guess you would need to be able to load SSL certificate into each app (assuming they support it)
00:08 Setting up Cloudflare for home lab server 03:18 Setting up Cloudflare for secure connections and DDOS protection. 06:38 Using Cloudflare's free plan for securing origin certificate 09:49 Purchasing and setting up a new domain on Cloudflare. 12:40 Setting up custom name servers and DNS settings for domain ownership 15:38 Setting up DNSSEC and SSL/TLS for secure domain access 18:34 Creating SSL certificate with Cloudflare 21:40 Setting up SSL certificates and proxy hosts in Nginx Proxy Manager. 24:49 Implementing Cloudflare for site protection and analytics
Thanks for this! I've been following along and everything has worked up until the testing of overseerr. When I click on the website I get an "Error 1002 DNS points to local or disallowed IP". How do I resolve this?
Hey, very good video, thanks for your work... but i have a problem with it, you show for the SSL to bring in NGENX there are a Key and a Pem, but i cant find the key ? the Pem, PKCS#7 and DER and no Key, what is the work around this little problem ?
I think I will just settle for Wireguard for the moment. Having issues with Nginx Proxy Manager and I'm not willing to waste more time trouble shooting atm. The only reason why I stopped using any old linux distro and switched over to unraid was for things to be more simple. Can't get any more simple than using wireguard IMHO.
Yeah WireGuard is great and a very solid VPN! If you do still feel like experimenting, you could always head over to our discord and someone will be able to give you a helping hand.
Hi Great video and followed a few without problems, can i ask when you purchase the domain how did you obtain the ip address? As i have a domain which i purchase only used for personal emails. This has been Activated on CloudFlare but i cannot A record the domain as i don't have an IP associated with it , is there a solution?
Hi, thanks for the tutorial! But mine doesn’t work. I followed step by step of the video, including buying a domain on google domains and I got an 522 error. I don’t know what to do next…
Hey! Used this guide and it works great but I have one question. When I added the www and my server IP it wouldn't let me have it selected as a proxy and I get the 9004 error that it can't be proxied, I believe this may be opening me up to vulnerabilities, any advice?
Anyone know which silly mistake I did to follow this video to the letter and then visiting my domain and get a good old: Invalid SSL certificate Error code 526 ? it says the certificate is from letsencrypt and lets assume cloudflare use that to issue you a certificate for your origin cert like in the video, what's next?
really great guide! been following ur videos and learning alot. even implement in on my server. any chance u could do a guide for organizr? especially about the plex single sign on and also using nginx proxy manager. thank you!
Hi Imran, thank you for watching and subscribing. I'm very happy to hear my videos have helped teach you a thing or two. You know what? I'll add Organizr to the list no problem be and will make a video when I can
Heya, I can't seem to find the video that shows the Let's encrypt certificate part? I am unable to add the certs to Nginx without adding the Let's encrypt first.
Thank you for the tutorial bro. I had just 1 issue: I used Port 443 for another Docker Container and Nginx wouldn´t work well, even I set up Nginx with another Port number and setup my router it will not work. After I changed Nginx Port to 443 everything works well now. I wanted Nginx on another Port because I don´t wanted to use Subdomain Address for my Dashboard but it´s ok I guess like this, because you get nothing if u just enter the domain name and for subdomains people need to know my Subdomain to get into my Server Web Interface. Cloudflare is epic with the setup u show here... Even a ping request doesn´t show my external IP Address and Port numbers are also safe and I get to the right place anyway... so perfect. Thank you bro
Amazing. Thank you! I only have my domain in Google and used Lets Encrypt. I did not know Cloudflare offered end to end encryption... for free! So cool! If you get a chance, can you create a video setting up Unraid/NextCloud/NGINX Proxy Manager? I could not get this to work at all no matter what I did. Thank you!
Hi Luis thank you for watching and subscribing! Glad to help you with the basics of getting running with CloudFlare. It's amazing. Sure can mate I use Nextcloud with my current setup so I'll make a video on it soon!
As of January 15, 2023. I believe you need to disable DNSSEC in your Google Domain because when I try to Register a domain in CloudFlare, it gives me an error " [domain name] does not have a support TLD. Here are some similar domains that might be available".
Thanks for your videos! I was reading up on reverse proxying and people recommended NGINX Proxy Manager so I stumbled upon your video. One thing I ran into was in the Cloudflare DNS records, you entered your server's IP address. I tried to do this with my Unraid server's IP address, I get a red bar at the bottom of the page with the error message: "DNS Validation Error (Code: 1004) This record type cannot be proxied." I tried googling this but found no solution. Do you happen to know why this is happening?
Have you tried using the DNS challenge option in the Proxy host? That option was not there when I created the video and apparently has helped others fix some issues they had
Hey, not sure if you've since moved on from this but for you or anyone following, you don't enter in your server's IP on cloudflare for the 'A' records. You enter in your 'WAN IP' for the domain. This gives your domain access to the network you connect to from your server. Then in NGINX, after you've opened the correct ports, you have host rules setup to connect your server to the different ports of docker containers you want to access via your domain. As the video shows, each docker will be on and accessible from its own sub-domain -- eg. 'overseerr.mydomain.com'. Good luck!
Great video! But I have a few problems: I set up CNAMEs for all my docker containers I want to use. But not every container is working. The only ones working are Plex and FreshRSS. Tautulli, Bitwarden and wallabag aren't reachable. I have HSTS enabeled in Cloudflare and Nginx proxy Manager, but with it disabeled it doesn't work either.
Hmm sorry my friend but there's a lot that could be wrong through the process. Start with the basics and make sure your IP is correct as well as your proxy host settings if using NGINX Proxy Manager
Thank you so much for the video. Please help! I followed through and tested on a container, it worked! However... It only works on containers that have their own custom IP. If they're bridge/host (i.e. same IP as the server) the webpage will not load. Instead it'll display the Cloudflare page with the error 'Error 502 Bad Gateway'.
I've followed everything but Cloudflare shows Host error when I try to access my overseerr remotely. Locally it is up and running. Not sure how to debug
Sadly my attempt to follow failed. As i've no idea if i need to open ports in the router or what, added certificates to nginx, using xbackbone as the image host, gave it my domain, but still can't connect to the thing.
Cloudflare as a cdn is only free for html traffic and not for vedio streaming like plex etc. The upload limit on their free plan is just 100mb. Also if one uses for non html uses they just limit the speed on the website to around 500kbps. Thats why i wanted to use bunny cdn. But i am unsure if bunny cdn hides my origin ip or not. Or if i use cloudflare without proxy on, and use bunny as a cdn with cloudflare , will my origin cloudflare certificate work on nginx proxy manager? If you could make a vedio covering that, it would be great.
Hello I'm stuck on the step where you add your IP address for the server (minute 11:45). When I enter the IP address for my server I get the following error from cloudshare: Target {IP Address} is not allowed for a proxied record. (Code: 9003) I've n ever done anything like this so I'm not sure how to fix it.
My domain has some preconfigured A, CNAME records from the website that i bought it from. Do i need to delete them? With my current setup i have some dns records in cloudflares editor and some on the domain providers website, i get a "connection timed out error code 522" when trying to access my server.
Ok guys I was on swag and cloudflare about a year but I wanted to add custom certificates from cloudflare. After setup from your video (thanks by the way) I have problem with my site because it says certificate is not valid. On let’s encrypt it goes great without problem. Is there some workaround?
Im a total noob with domains and registrars! i setup my nginx and cloudflare with my epik domain pointing to duckdns and using cloudflare nameservers. This is becouse i have a dynamic ip. I can reach the default-site nginx Congratulation page. The problem is that despite all the config i get a insecure page... and i trie to connect to a airsonic server making cname entry in cloudflare but i always reach the nginx webpage. Any idea? Great video by the way!
Thanks for watching Frede. Are you using NGINX Proxy Manager or a different reverse proxy? I have videos on NGINX Proxy Manager if that helps you narrow down the steps. Also, you can ditch DuckDNS entirely and use CloudFlare Dynamic DNS on Unraid. Again, I have videos on that too under CloudFlare playlist.
i get a "DNS Validation Error (Code: 1004) This record type cannot be proxied." when trying to add my server ip. If i toggle off proxy it works but doesnt that defeat the purpose of security? Your help is much appreciated!
