SSL doesnt work

[fritex]

Greetings,

Thank you for asking.

@shyzite

my site doesnt show buttons and stuff when i access to it via Cloudflare

May I ask if you have added Cloudflare IP’s to Nextcloud configuration file?

Reverse Proxy with Nextcloud

You should have these lines in your Nextcloud’s config file: 'trusted_proxies' => array ( 0 => '10.42.0.0/16', 1 => '103.21.244.0/22', 2 => '103.22.200.0/22', 3 => '103.31.4.0/22', 4 => '104.16.0.0/12', 5 => '108.162.192.0/18', 6 => '131.0.72.0/22', 7 => '141.101.64.0/18', 8 => '162.158.0.0/15', 9 => '172.64.0.0/13', 10 => '173.245.48.0/20', 11 => '188.114.96.0/20', 12 => '190.93.240.0/20', 13 => '197.234.240.0/22', 14 => '198.41.…

Re-check if Cloudflare is allowed to connect to your origin host to as follows in the below article:

• https://support.cloudflare.com/hc/en-us/articles/201897700-Allowing-Cloudflare-IP-addresses

Nevertheless, Cloudflare IP addresses list can be found here:

• IP Ranges

@shyzite

my SSL certificate on my website does work on my main page

Furthermore, before moving to Cloudflare, was your Website working over HTTPS connection?

If you already have Let’s Encrypt on the server, you are good.
Make sure to select Full (Strict) SSL by navigating to the SSL/TLS tab of Cloudflare dashboard for your domain name:

Why you should choose Full Strict, and only Full Strict

Unencrypted & unverified connections Imagine you open Paypal and suddenly get that warning [image] Would you continue? Probably not. For decades leaders in IT security have advocated that people upgrade their sites from unencrypted HTTP to secure HTTPS. And for a reason, everything you send via an HTTP connection is sent in plain text and can be intercepted at any point between you and the server. Equally, you’d probably not proceed if you got such a warning, right? [image] That’s when th…

Otherwise, may I ask what SSL option have you got selected under the SSL/TLS tab at Cloudflare dashboard for your domain ( Flexible, Full, Full Strict … )?

In case you do not have an SSL certificate, you can use Cloudflare SSL, if so, kindly make sure you follow the instructions as follows on the below article to setup an SSL certificate using Cloudflare Origin CA Certificate:

• Cloudflare origin CA · Cloudflare SSL/TLS docs

@shyzite

nextcloud

In terms of a Nextcloud, you could have issues if you are on a Free plan (even Business) and going to upload files larger than 100MB. Per default, you are allowed to upload 100MB for proxied hostname (DNS record) in a single request.

Cloudflare limits the upload size (HTTP POST request size) per plan type:

• 100MB Free and Pro
• 200MB Business
• 500MB Enterprise by default. Contact Customer Support to request a limit increase.

Source article:

• Default Cache Behavior · Cloudflare Cache (CDN) docs

Otherwise, if you are on Business or Enterprise plan, you can increase this (Business up to 200MB and Enterprise 500MB or larger upon request) and upload larger files.

I’d suggest you to either split it in smaller chunks, or continue using unproxied (DNS-only) hostname (DNS record) when you are uploading such large files. After you finish, switch back to .

@shyzite

It works with the IP Adress but it doesnt with the Domain

Furthermore, try disabling / removing the Content Security Policy (CSP) for which I can see it is causing some issues and prevent them from loading your website resources.

Try disabling Rocket Loader at Cloudflare.

I’d suggest you to test and temporary enable the “Pause Cloudflare” and check if it works by accessing directly via your domain name by:

1. Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
2. The link is in the lower right corner of that page.
3. Give it five minutes to take effect, then make sure site is working as expected with HTTPS.
4. If all good, un-pause Cloudflare