@silvermaw no worries, happens to the best 🙂

Solved. It was a small misconfiguration on the registrar side. Thanks!

@jagan personally I stay away from all things Cloudflare. Like the Tech Giants they are in the business of surveillance cspitalism and are massively over centralising the Internet. See also stuff like https://tech.tiq.cc/2016/01/why-you-shouldnt-use-cloudflare/

@metalcated https://support.cloudflare.com/hc/en-us/articles/115002833612-Understanding-Cloudflare-Audit-Logs . In our cloudflare account, I can see there are records for every DNS change as "Rec del" and "Rec add".

@doodlemania2
I don't use cloudron and I only commented as when I was looking for the specific cloudflare error:

The service may be down or it may not be responding to traffic from cloudflared: x509: certificate is not valid for any names, but wanted to match localhost" cfRay=6957204cbdeb1fb9-SJC ingressRule=0 originService=https://localhost

I landed here from Google and I know that in the future, I will probably have this issue again and forget the solution.
So I'm posting this more for future me.

However, this would solve that specific issue that @girish was having,

I got my services up and going that used a self signed ssl cert and was able to proxy it with cloudflare.

It would be cool to try cloudron as it sounds like a really great product, but I personally don't have the budget for it at the moment.

I didn't know Argo tunnels were free. So one can hide the mail service and put it thru an Argo tunnel on a subdomain to the world.

https://docs.ibracorp.io/all-guides-in-order/documentation/cloudflare-tunnel

Similarly one can have another domain and IP handle the incoming, which is tunneled to you via Tailscale.

https://docs.ibracorp.io/all-guides-in-order/documentation/tailscale

@comtop1 Did you get this sorted out? Usually, I have seen disabling and re-enabling cloudflare proxy fixes things. Seems to be some in Cloudflare SSL proxy caching.

@austin I was noticing the CF API having issues yesterday, so it's likely you just had an intermittent failure. A retry would have been sufficient.

@alexsunny123 ok there are quite a few variables in the mix here it seems. For a start, can you connect to the Cloudron setup view using the public IP address from your ISP on port 80 and 443?

To rule out some other maybe interfering parts, disable the Cloudflare proxying.

Since you mentioned email, on a residential connection you will most likely require a mail relay to work properly, anyways port 25 will most likely be blocked by your ISP. Cloudron as mail relay support for various providers though.

Lastly for Cloudron it doesn't really matter if bare-metal or VM, so there are no special docs about this. You should be fine as long as you have vanilla Ubuntu 20.04 server installed.

@girish yep, it loads, awesome, thank you👍 😊

@guyds Ah, good to know. Did not know this limitation!

Makes a lot of sense.

@theciscogeek When using Cloudflare, we have a check as to whether it's proxying and we skip the DNS propagation checks - https://git.cloudron.io/cloudron/box/-/blob/master/src/dns/cloudflare.js#L274

@robi yeah, with ecommerce being our primary business, we're invested in this. We have 12 very experienced devs on the team but just a few of them have had time to start looking at Cloudron this week. In this for the long-term though so I'm sure you'll start to see our work filtering through very soon.

@Lonk Yup, that sounds right. In fact, it seems that Cloudflare made the nginx+http3 patch (but not sure if nginx itself ended up using that).

Thanks, now I understand

Truly heroic support! 🙌 Happy to know this is covered and tested 🙂

@girish

This is intentional because the root domain record can be in use on another server/app/website.

Right, that makes sense.

I added a redirect from the root domain and it solved all my problems. Thanks for the quick help.

@girish Done - https://forum.cloudron.io/topic/3777/support-optional-cloudflare-proxied-record-creation

So, it seems like giving the app a "relocation" by pressing the save button under the Location config tab & a quick Cloudflare proxy off-on, and then some time is the fix.

EDIT
So it is Cloudflare that is the problem and not Cloudron. Specifically their proxy

OK, @Trankery informed that this happens more most/all freenom domains. This includes .tech as well.

@bangden07 Ah, that's a smart work around! I just noticed that you had SSL issues on the root domain. The wildcard cert only covers subdomains i.e *.foo.com but not foo.com. Cloudron still has to get normal certs for foo.com. I guess after a week, you can remove the cloudflare proxy.

THANK YOU. I use Cloudflare as my DNS provider. Looks like they have some sort of caching feature called Cloudflare Rocketloader which caused this conflict. I Turned it off and it worked now. Much appreciated! @nebulon

https://community.cloudflare.com/t/how-can-i-remove-the-rocket-loader-script-from-the-header-tag-on-my-website/4229

@girish said in Using Cloudflare without Global API Key:

Can confirm that all zones access is not required in cloudflare anymore. Will update docs.

I just added a domain than, just to be more concise
we have to specify the Zone Name

af9fe70e-4e52-450f-8527-72561927c428-image.png

unless it will not work with only Zone -> DNS -> Edit permissions at Cloudflare
ab12edf9-baea-4e95-8941-1268a7cb5a96-image.png