Hi.
I want to completely block everything except the Cloudflare ip list on the firewall - but if I do that, LE won’t be able to reissue certificates for my domains. Has anyone set something similar up? Outside of hestiacp, I’ve been using acme.sh + ZeroSSL + Cloudflare DNS via token for years - it works perfectly. Is there any plan to support something like this?
Thanks!
Why do you need to issue a valid certificate on your server if you use Cloudflare?
Make it self-signed.
To be able to switch to dns only mode at any time and let users bypass the cdn to your server
Thanks! But that’s not what I asked about. I need dns verification Let's Encrypt SSL with Cloudflare DNS Validation Guide · GitHub