How To Use Certbot Behind Cloudflare Proxy

Halo, kalau kamu merasa tulisan saya ngebantu kamu, kamu bisa ucapkan terima kasih lewat saweria.

If you feel this website help you, you can donate at saweria.

The Problem

How can I install Let’s Encrypt when my domain behind Cloudflare Proxy?

Solution

1. Create Cloudflare API Token with Zone:DNS:Edit permission

2. Install certbot-dns-cloudflare sudo apt install python3-certbot-dns-cloudflare.

   If you got error certbot: error: unrecognized arguments: --dns-cloudflare-credentials, that mean python3-certbot-dns-cloudflare & it depedencies not installed correctly, use sudo apt install --reinstall python3-certbot-dns-cloudflare.

3. Then create file cloudflare.ini, you can put it anywhere but We will follow documentation, it will put in ~/.secrets/certbot/cloudflare.ini

4. mkdir -p ~/.secrets/certbot, create new file vim ~/.secrets/certbot/cloudflare.ini

#mkdir -p ~/.secrets/certbot/
#put this file in ~/.secrets/certbot/cloudflare.ini
# Cloudflare API token used by Certbot
dns_cloudflare_api_token = yourCF_API_TOKEN

5. Change permission with chmod 600 ~/.secrets/certbot/cloudflare.ini

6. Then install using this

sudo certbot certonly --dns-cloudflare --dns-cloudflare-credentials /home/yourUSER/.secrets/certbot/cloudflare.ini   -d 'ipang.my.id'

#for multiple domain
sudo certbot certonly --dns-cloudflare --dns-cloudflare-credentials /home/yourUSER/.secrets/certbot/cloudflare.ini   -d 'ipang.my.id' -d 'sub.ipang.my.id'

References:

certbot-dns-cloudflare’s documentation!