Setting up Let's Encrypt with CloudFlare and dynamic IP
My setup is as follows:
- Dedicated server (Linux) with dynamic IP address
- NO-IP domain name
- domain name
- When I want to access my system (server), I access my
domain, which redirects me to my NO-IP domain which, in turn,
redirects to a current IP address of the server.
I'd like to add encryption and DDOS protection to my system so I thought about setting up an SSL certificate and introducing CloudFlare services.
It is easy to setup CloudFlare, but I am really not sure if it's possible to setup up SSL via Let's Encrypt with the scheme I've created. I became lost in various types of SSL certificates (what exactly do I need?) considering several redirection that would occur.
The way I understood it is if I introduce SSL certificate from CloudFlare, I would only encrypt traffic from a user to CloudFlare but not from CloudFlare to the server. Am I right?
If I am going to get Let's Encrypt certificate, I would need to install it on my server, but how do I get one if there are several redirects involved and I have a dynamic IP address? How would it work with CloudFlare?
You can create a self-signed certificate on the server, and use that with CF's Full, but not Full (strict) SSL setting. I don't know if you'd have to create a new self-signed certificate each time the IP changes though.
https://blog.cloudflare.com/origin-server-connection-security-with-universal-ssl/
Comments
Post a Comment