Ensure Cloudflare works with domains set to Proxy

[curtismchale]

Source
CM

Currently Cloudflare doesn't validate SSL certificates for Let's Encrypt because the call to http://domain.tld/.well-known/acme-challenge/<token> goes over http and Cloudflare is set to force https. Thus the challenge fails.

Option 1

Investigate adding an exception to the http domain level request that would allow the ACME challenge through and then validate.

Option 2

Does it work if we ignore Let's Encrypt entirely and simply let Cloudflare host the certificate? Can we simply let Let's Encrypt fail and not worry about it?

Resources

• Authenticated Origin Pull

[curtismchale]

Yes it works if you use the settings documented here