Stop Fighting SSL in Coolify Behind Cloudflare

If you're using Coolify with Cloudflare, SSL can feel confusing. You deploy your app, connect the domain, and expect HTTPS to just work. But instead, you end up: changing SSL modes in Cloudflare tr...

By · · 1 min read
Stop Fighting SSL in Coolify Behind Cloudflare

Source: DEV Community

If you're using Coolify with Cloudflare, SSL can feel confusing. You deploy your app, connect the domain, and expect HTTPS to just work. But instead, you end up: changing SSL modes in Cloudflare trying different configs in your server not really sure what’s broken Everything looks fine, but something is off. What’s going on When Cloudflare proxy is enabled, there are two connections: User → Cloudflare Cloudflare → Your server The second one is the important part. If your server doesn’t have a proper certificate, Cloudflare can’t securely connect to it — especially in Full (Strict) mode. That’s where most setups fail. The right way to handle it Cloudflare provides Origin CA certificates. These are meant for your server (not browsers), and they: work with Cloudflare proxy enabled last up to 15 years don’t require validation like Let’s Encrypt So instead of fighting SSL, you just need to set this up correctly. The problem Setting this up manually takes time: generate key and certificate u