Unraid Tutorial: Cloudflare CDN + Domain Purchase & NGINX Setup

Рет қаралды 94,846

Күн бұрын

Today, we'll be going through the entire process of purchasing a domain, setting up DNS, connecting to Cloudflare, connecting CloudFlare to NGINX Proxy Manager, and securing our traffic at every step via SSL and DNSSEC using a Cloudflare Origin certificate on our Unraid server.
Many comments asked for this video and required anyone using any reverse proxy to consider it an option.
Cloudflare is one of the most extensive networks operating on the Internet. People use Cloudflare services to increase their websites' and services' security and performance.
🔔 Subscribe for more tech tips and tutorials: @IBRACORP
👍 Like this video if you find it helpful, and tell us in the comments what other tutorials you'd like to see.
🚀 Timestamps:
0:00 - Introduction
2:42 - Pricing
3:31 - Why use Cloudflare?
8:49 - Purchasing a domain
10:27 - Setting up Cloudflare
18:37 - Create Origin Certificate
20:33 - Proxying an endpoint
21:40 - Installing our Origin Certificate
24:00 - Testing
24:30 - Analytics
📌 Follow us on social media for the latest updates:
Website: ibracorp.io/
Discord: / discord
Reddit: / ibracorp
Twitter: / ibracorp_io
Facebook: / ibracorp
💖 Support Us:
Your support helps us to keep producing high-quality tech tutorials and content. If you've found value in our videos, consider supporting us in the following ways:
PayPal: www.paypal.com/donate/?hosted...
Shop: shop.ibracorp.io/
Subscribe and share our videos with friends and colleagues.
Every bit of support makes a huge difference and enables us to continue delivering content that helps you make the most out of the latest technology!
For business enquiries, please email support@ibracorp.io
#cloudflare #cdn #ddos #ddns #cloudflarecdntutorial #cloudflareaccess #cloudflaresetup #cloudflaretutorial #cloudflaressl #configureunraid #ddosmitigation #howtousecloudflare #unraid #unraidtutorial #cdnwordpresscloudflare free vps fastly stock edge computing dns over https how to setup cloudflare cloudflare ssl

Пікірлер: 324

@IBRACORP 3 жыл бұрын

Thank you for watching our Cloudflare video! What do you think about Cloudflare? What does your environment look like? Let us know in the comments

@bobalot2 Жыл бұрын

Are you able to do a video on enabling HSTS and setting up Nginx Proxy Manager with it? The warnings on cloudflare indicate that you could lose connection with your website for months if you do it wrong.

@nielsdominguez991 8 ай бұрын

portainer with docker + nginxproxymanager on my side

@bellator8226 2 жыл бұрын

I've been working my way through this series and improving my own setup with your suggestions. You have a gift for explaining things well without being too long-winded. Keep up the awesome work!

@IBRACORP 2 жыл бұрын

Thank you for the kind words Christian, absolutely stoked to hear you're enjoying them . Thanks for watching!

@Orinshwift Жыл бұрын

This video as well as a ton of your newer ones have been invaluable to me! Awesome content. I really appreciate the time that goes into these. Cheers!

@IBRACORP Жыл бұрын

Thank you Alex ❤️

@howl4838 2 жыл бұрын

Your content inspired me to rebuild my shoddy unraid server and I couldn't be happier with how its turned out! Thanks so much!

@IBRACORP 2 жыл бұрын

Glad to hear it mate! Pleasure to have helped you on your journey 🙂

@smsunday1 3 жыл бұрын

Very well done. I am really liking how you are explaining things and then go through it all! I really appreciate it.

@IBRACORP 3 жыл бұрын

HI Scott, thank you for coming back and giving you feedback. I do take it seriously and your previous feedback on Authelia made me create a new in depth video about it. It's recorded and have started editing so keep an eye out for that one soon!

@christopherhunt147 3 жыл бұрын

This is awesome!! It actually worked!! Thank you. I finally can use my server without a vpn all the time. You rock!

@thomasgatenby8994 3 жыл бұрын

man I needed your guides a year ago! Awesome guides, super clear and easy to follow!

@IBRACORP 3 жыл бұрын

Thanks Thomas, maybe one day I can do a video on travelling back in time so I can help you earlier. Thanks for watching!

@nielsdominguez991 8 ай бұрын

I watch this video every 3 months every-time I setup a new project 😂 this video is so good for those who like to setup their own services for free

@jpslv 2 жыл бұрын

Dude, thank you so much. Thanks to this video I was able to securely install NextCloud on my unRAID server!

@anthony.boyington 2 жыл бұрын

Thank you very much for another great video. Great stuff indeed. Between you and Spaceinvader One, I have learnt so much and both your videos are informative, detailed and easy to follow.

@jurerepina 3 ай бұрын

Many thanks for this video. It was as instructive and enjoyable to watch, you have made a complicated topic easy to digest and you cared to explain some things so it's not just a "click here do that".

@ProjectR86 3 жыл бұрын

From one Aussie to another, thanks mate. I've been running letsencrypt + my domain for a while now and I didn't realise how easy it is to go down the CloudFlare path. I'll definitely be looking into this myself in the next few days. It's also nice hearing the Aussie pronunciation for "cache", I don't hear it very often outside my circle of friends.

@IBRACORP 3 жыл бұрын

Thank you mate really appreciate the feedback! I'm actually wrapped to hear some Aussies are here too so I'm not alone. Stay tuned for more

@ProjectR86 3 жыл бұрын

@@IBRACORP Not a problem. I've got it all set up and working perfectly after watching your video. Which was a painless 20 minutes to switch from LetsEncrypt to NPM+Cloudflare whilst keeping my domain name all intact. Keep these sorts of guides coming, you're very clear and concise, you've also got a new subscriber. (Those Cloudflare analytics are super cool too).

@dannyholland1573 2 жыл бұрын

Wow I’ve been doing this stuff for a long time and this video explained some high level stuff I’ve always struggled understanding in an easy to get manner. Well done!

@IBRACORP 2 жыл бұрын

Cheers Danny appreciate the feedback 🙂

@fernandesgil 3 жыл бұрын

Thank you! Very easy to follow. The only question was about the dynamic Ip, but i saw your comment up there. Following you for next videos

@IBRACORP 3 жыл бұрын

Thanks mate I will do a follow up on dynamic very soon

@xeneye 3 жыл бұрын

Great stuff mate, thanks for explaining this, very clear and easy to follow, much appreciated.

@IBRACORP 3 жыл бұрын

Thanks Paul, appreciate the feedback and for stopping by. Looking forward to putting more out there !

@seaofcuriosity 2 жыл бұрын

Best tutorial on cloudflare ever ! . I owe you a thousand THANKS .

@IBRACORP 2 жыл бұрын

Our pleasure! Thanks for watching

@lfmonteiroo 3 жыл бұрын

Great video! Very easy to follow! You have a great channel! I hope it keeps on growing!

@IBRACORP 3 жыл бұрын

Thank you Luiz, appreciate the feedback!

@SeanAnthony 3 жыл бұрын

I have mine setup similar to yours except I decided to place NPM in a Linux container (lxc) on Proxmox. I didn't want to put all my eggs in one basket when it came to my unRAID server. Which video to you talk about setting up a "custom network" for your docker containers in unRAID. Thank you for your time and effort on these videos. They are priceless!!!

@IBRACORP 3 жыл бұрын

Hey Brother thanks for the comment and for watching. That's always a great idea and I always recommend seperating things as much as possible within your means so good thinking there. For custom dock network it's in this video at 4:09 mark kzfaq.info/get/bejne/od2Po9KZx7GpY40.html Thanks for the feedback!

@julian.morgan 3 жыл бұрын

Not sure how I missed this video - but fills in quite a few gaps. Much appreciated!!

@IBRACORP 3 жыл бұрын

Thanks Julian!

@psycorefull 2 жыл бұрын

GREAT!!! You are the best! Very simple and works like a pro!

@DwarDPT Жыл бұрын

Thanks for alle the great Unraid videos!! Very nice!

@PeterDeNardi 2 жыл бұрын

Fantastic series man, loving it all. Thank you so much for the help!

@IBRACORP 2 жыл бұрын

Thanks for watching 🙂

@KannonRomano Жыл бұрын

Great video! I used this video to help me finish configuring nextcloud

@kimh9337 3 жыл бұрын

This is great! :) very nice video. Instrutive and precise information. keep it up!

@KevinMarchese 3 жыл бұрын

Absolutely the best tutorial on this subject! solved soooo many of my problems

@IBRACORP 3 жыл бұрын

Thank you for watching!

@traolin5877 4 ай бұрын

your videos have really helped get my media setup up and running. thanks for all the videos!

@IBRACORP 4 ай бұрын

Thank you very much, glad to help!

@NexxenZone 2 жыл бұрын

Thanks heaps for this. I thought this would be way more of a pain than it was.Set it up this morning, thanks to you!

@IBRACORP 2 жыл бұрын

My pleasure thank you for watching!

@carl-ivartornqvist5539 Жыл бұрын

Great tutorial. I have learned much how to secure my connection. Thank you.

@Manhole7130 3 жыл бұрын

Looks like this is what I'm doing next, hadn't realised it was actually so simple

@IBRACORP 3 жыл бұрын

Thanks for watching. Yeah it's pretty straightforward once it's mapped out. Glad it helped, cheers

@lochnessmonster4518 2 жыл бұрын

F'n dope tutorial man. Thankyou for the clear and detailed tutorial!

@IBRACORP 2 жыл бұрын

Thank you ❤️

@squeak751 2 жыл бұрын

thank you so very much for this guide. It has saved my sanity.

@hU5k1 2 жыл бұрын

thanks i enjoyed the video and hopefully learned a few things i can implement to my setup.. looking forward to watching other videos from you .. thanks from a fellow Aussie :)

@IBRACORP 2 жыл бұрын

Thanks mate great to hear, hope you enjoy the rest of our videos 🙂

@irfanhekimoglu3648 Жыл бұрын

Hey all. Trying to get this done but keep getting 522 (Connection timed out from Cloudflare side.. Any ideas what went wrong?)

@eazypeazy6650 3 жыл бұрын

U got a very calm approach of explaining things easy to understand and follow... thanks +1sub

@IBRACORP 3 жыл бұрын

Awesome, thank you! Appreciate your time :)

@linusgrip6400 3 жыл бұрын

Awesome video as always! Please make a video of enable HSTS :) Kepp up the good work!

@anthonybenjamin4311 6 ай бұрын

"put the ip of our server in" ive been searching for hours and cant figure out what you mean i do this and get an error

@chandrakiran2796 3 жыл бұрын

Thanks a lot, i got it working with IPV6 coz my ISP's IPv4 is a CG-NAT. All I had to do was instead of A record I added AAAA record and thats it. Thanks again.

@IBRACORP 3 жыл бұрын

Thanks for the tip! That's a great workaround

@pgweb65 3 жыл бұрын

Thanks for the cloudflare vid, helped me test out moving from Swag, did not know about the origin Cert, just looking at testing free IPA

@IBRACORP 3 жыл бұрын

My pleasure Peter thank you for watching. I also have a FreeIPA video if you haven't seen yet

@BillTorelli Жыл бұрын

Excellent! Now understand CF a bit better! And, yes, I was definitely exposed...

@luisvelez9368 3 ай бұрын

Great guide.

@bluedevil678 10 ай бұрын

Great video! Pro Tips: 1) if you are using Unraid and using a custom network you will need to switch those other docker containers to the br0 network as well, OR changing the Settings->Docker->"Host access to custom networks" setting to "Enabled". 2) If your receiving error 522: make sure your SSL settings in CloudFlare (domain > SSL tab on your left) is set to "full", this is defaulted to "flexible".

@IBRACORP 10 ай бұрын

Thanks for the tips!

@jay10987 8 ай бұрын

Thanks, this fixed my issue. Such an easy error to make.

@brendensmith3325 2 жыл бұрын

Thanks for all the info mate!!

@IBRACORP 2 жыл бұрын

Any time!

@SynonymOfHeat 3 жыл бұрын

That was really helpful, thanks!

@IBRACORP 3 жыл бұрын

Very welcome! Thanks for watching

@darthkielbasa Жыл бұрын

I learned the hard way of what not to do. I thought that my obscure corner of the interwebs was unknown and untouchable. Big mistake. I wont expose anything without end-to-end encryption or a vpn. Other Content Creators do an excellent job creating howto’s but it blows my mind when they throw a nextcloud (or similar file sharing ) tutorial on YT and don’t even recommend E2E or other threat mitigation methods. You’re doing the Lords work performing a service for humanity.

@bunkermagnus 10 ай бұрын

Thank you for this great video.

@samcanno7692 3 жыл бұрын

nice video, great to see more Aussies!!

@IBRACORP 3 жыл бұрын

Cheers Sam!

@sutlnet 3 жыл бұрын

Brilliant Tutorial! Thank you

@IBRACORP 3 жыл бұрын

Thanks for watching!

@LittleRedMini 2 жыл бұрын

mate that was brilliant thanks a lot

@IBRACORP 2 жыл бұрын

Cheers Owen!

@kristianusifoh9307 Жыл бұрын

Thanks for this video. So helpful

@IBRACORP Жыл бұрын

Glad it was helpful!

@BerkeleyTowers 3 жыл бұрын

Another big thumb! This series is like a box set you can't put down...... Can you keep them coming fast enough??? Respect....

@IBRACORP 3 жыл бұрын

I'll sure as hell try!

@OrianIglesias 2 жыл бұрын

Thanks for this!

@IBRACORP 2 жыл бұрын

No worries thanks for watching Orian!

@hondschaap 3 жыл бұрын

Great video! I was using LetsEncrypt certificates from NPM, but it looks like Cloudflare auto renews the certificate for you. Very easy to implement using the steps in your video, subscribed!

@IBRACORP 3 жыл бұрын

Glad it was helpful! Thank you for your support

@brainlessdude 11 ай бұрын

Im trying to follow your video but at which point do you setup a service to point the domain towards your home IP adress? Or are IP adresses in australia static per default? Mine is changing sometimes so I need a DynDNS setup of some sort, right?

@stefanlaterra5797 2 жыл бұрын

Heya, I can't seem to find the video that shows the Let's encrypt certificate part? I am unable to add the certs to Nginx without adding the Let's encrypt first.

@smaiderman2 10 ай бұрын

Hello @ibracorp . Thank you so much for all the videos. I have a doubt, in minute 11:45 when adding de A recod to cloudflare, what is de ip address? is it my duckdns name? if not, how can I get it? (sorry for my noobness) Thank you!

@dimitristsoutsouras2712 2 жыл бұрын

At 11.44, even though you mention to put in the ipv4 address number, you filled in the name. Do you have a dynamic ip address and behind ibracorp is a dynamic ip address linked with a ddns service? If you actually put there a number in the ipv4 field what do you put in for the name field?

@SaifBinAdhed 2 жыл бұрын

you are the best man!

@IBRACORP 2 жыл бұрын

Shukran Saif! Salam from Australia

@SaifBinAdhed 2 жыл бұрын

@@IBRACORP 🙉 jaws dropped. Afwan from Dubai

@butchdresser6928 Жыл бұрын

Hi. I setup cloud flare on our production environment. Cloud flared is running on Unraid and we have an Argo tunnel configured. We would like to setup cloud flared on multiple machines ie windows servers, so that our tunnel gets the benefits of multiple connections and redundancy. I see a lot of tutorials showing how to do this by creating new tunnels. Id like to see a tutorial on how to achieve this to duplicate our existing tunnel across different machines as a backup to the Unraid install of cloud flared. Thank You, Keep up the excellent tutorials..Your my go to for all production deployments.. Butch

@mattwantsatesla3812 8 ай бұрын

I followed exactly as you did in this video as well as your nginx video but I get a 502 error when accessing the domain

@ahmedsemmoud6564 4 ай бұрын

Thank you so much for your tutorial, it’s very clear. However I wonder, why use Nginx in addition, when you already have a secure path with Cloudflare Tunnel ?

@DamionD75 2 жыл бұрын

Late to the party on this video but love it, couldn't have set this up without help. Issue: when i try to set up full strict and generate the certificate then add it to my certificates and proxies they just will not work, with a cloudflare error page stating the origin cert didn't match. tried invalidating and regenerating the key multiple times, but no go. Question: any idea what i have set incorrect (following your video, even domain transferred to google to ensure it was like for like) to cause this?

@AndreAndre-ud6dj 2 жыл бұрын

Hey, very good video, thanks for your work... but i have a problem with it, you show for the SSL to bring in NGENX there are a Key and a Pem, but i cant find the key ? the Pem, PKCS#7 and DER and no Key, what is the work around this little problem ?

@bravegh0st 6 ай бұрын

Thanks for this! I've been following along and everything has worked up until the testing of overseerr. When I click on the website I get an "Error 1002 DNS points to local or disallowed IP". How do I resolve this?

@speakingcolors Жыл бұрын

Anyone know which silly mistake I did to follow this video to the letter and then visiting my domain and get a good old: Invalid SSL certificate Error code 526 ? it says the certificate is from letsencrypt and lets assume cloudflare use that to issue you a certificate for your origin cert like in the video, what's next?

@100MilWill 9 ай бұрын

SO i folloed your guide but when I go to the URL it brings me to my tower unraid login. Both the overseerr one and the main URL. How do i fix this?

@evanmarshall9498 Жыл бұрын

Any idea why I get this error when adding record pointing to server IP address? DNS Validation Error (Code: 1004) This record type cannot be proxied.

@samuelgreenberg2436 11 ай бұрын

My domain has some preconfigured A, CNAME records from the website that i bought it from. Do i need to delete them? With my current setup i have some dns records in cloudflares editor and some on the domain providers website, i get a "connection timed out error code 522" when trying to access my server.

@elbachir4720 3 жыл бұрын

thank you very much!

@IBRACORP 3 жыл бұрын

Thanks for watching

@ZerkerEOD Жыл бұрын

Questions, does this mean that Cloudflare terminates your Origin SSL then re-encryptes with the edge certificate?

@davorinrusevljan6440 2 жыл бұрын

Is it possible to redirect traffic to the server for which we do not own the ip for instance to amazon s3 or some similar service?

@melisamochel4511 8 ай бұрын

when I try to set up overseerr doing this, it just takes me to my unraid login page. Any idea what may be wrong?

@Mehdital89 7 ай бұрын

I've followed everything but Cloudflare shows Host error when I try to access my overseerr remotely. Locally it is up and running. Not sure how to debug

@hansdampf6813 2 жыл бұрын

Great Video! Any chance to use access lists with this setup?

@giants5688 6 ай бұрын

Thanks!

@IBRACORP 6 ай бұрын

Thank you for your support 🙏

@masonbes Жыл бұрын

How do I use a wildcard certificate on the main panel? With nginx proxy manager

@Secondcropcreative 3 жыл бұрын

Benn loving your videos - however, I can't find a solution around my CGNAT - I've tried these steps, but maybe I'm missing something? I have been using zerotier just fine, but Ideally, I'd like to get to a point where I can just use one of the many domains I own and utilize their subdomains...

@RagaiMeena 2 жыл бұрын

great video as always. Can you please point out where can i find guidance regarding setting up the email aliases etc.... Regular google account not a workforce one. Thansk

@bhman79 Жыл бұрын

Sorry if this has already been asked, but if I set this up is it going to mess up my OpenVPN server that is running on my router?

@FawziBreidi Ай бұрын

do i need any kind of port forwarding on the actual router?

@RicardoWagner 3 жыл бұрын

Where have you been ?, great vid

@maxmiller5370 7 ай бұрын

I've gotten as far as uploading the custom certificates, but when I try to access the site through NGINX I keep getting a 526 error, or a redirect to my root domain. I'm not even sure what to troubleshoot at this point

@GaMeOvErRules 4 ай бұрын

nice video. My biggest question is you don't install cloudflare on your unraid server itself? Just overseerr and NPM

@TahsinAbedin Жыл бұрын

when ever i try to test it goes to my unraid server and not the docker container. Can someone help me figure out where i went wrong?

@Duckers_McQuack Жыл бұрын

Sadly my attempt to follow failed. As i've no idea if i need to open ports in the router or what, added certificates to nginx, using xbackbone as the image host, gave it my domain, but still can't connect to the thing.

@marek2388 2 жыл бұрын

Ok guys I was on swag and cloudflare about a year but I wanted to add custom certificates from cloudflare. After setup from your video (thanks by the way) I have problem with my site because it says certificate is not valid. On let’s encrypt it goes great without problem. Is there some workaround?

@frankronnie5531 Ай бұрын

Hello I'm stuck on the step where you add your IP address for the server (minute 11:45). When I enter the IP address for my server I get the following error from cloudshare: Target {IP Address} is not allowed for a proxied record. (Code: 9003) I've n ever done anything like this so I'm not sure how to fix it.

@juiceboxsteez 8 ай бұрын

12:10 What’s the difference between the www, domain, and @ A records, aren’t they the same?

@F3L1XS3V Жыл бұрын

Muchas gracias por la ayuda

@darkmatter00758 Жыл бұрын

Awesome video, however I'm getting an Error code 502 "Bad Gateway" from Cloudflare. I'm not sure how to fix this. Any suggestions?

@fbifido2 2 жыл бұрын

Do you know of any IT/pc-parts inventory web interface application in docker ????

@someguy9321 Жыл бұрын

what did i do wrong if the link just takes me to my unraid web gui?

@bobgone7865 Жыл бұрын

Anyone know how to make this work with cloudflared tunnel? I'm getting bad gateway after following instructions.

@michaelyounge5743 2 жыл бұрын

Hi Great video and followed a few without problems, can i ask when you purchase the domain how did you obtain the ip address? As i have a domain which i purchase only used for personal emails. This has been Activated on CloudFlare but i cannot A record the domain as i don't have an IP associated with it , is there a solution?

@TahsinAbedin Жыл бұрын

i get a "DNS Validation Error (Code: 1004) This record type cannot be proxied." when trying to add my server ip. If i toggle off proxy it works but doesnt that defeat the purpose of security? Your help is much appreciated!

@mitchross2852 3 жыл бұрын

Awesome!

@IBRACORP 3 жыл бұрын

Glad you think so! Thanks for watching

@IBRACORP 3 жыл бұрын

Hi Mitch, I can see a notification with your comment about a shout out but doesn't seem to be showing me the comment so I can click the link. Any chance you could email it? support@ibracorp.io

@kevinabella5991 2 жыл бұрын

Sa here!

@burnsy180 3 жыл бұрын

Hey mate, just came across your channel a few weeks ago and it's fantastic. Unraid and most of your vids have been a good reflection of my setup so far. Have been watching SI1's vids for the last few years but great to see some local representation! Quick question though, i'm exposing some services via NPM and duckdns, although I have a static IP (I just use duckdns for the hostname). Is there a way to mask your public IP (similar to Cloudflare) without owning a domain? Or do I have to buy one? Cheers

@IBRACORP 3 жыл бұрын

Thanks for watching Joel, glad you like them! To my knowledge mate I don't think so but I could be corrected. It's cheap to own a domain these days if you wanted one

@UltimateArts13 7 ай бұрын

Great video. I got as far as the CNAME but cannot connect to either qbit or jellyfin. Tried with and without https. Any suggestions? Regardless, thanks for the video!

@nielsdominguez991 Жыл бұрын

thanks much appreciated

@IBRACORP Жыл бұрын

You're welcome thanks for watching Nate

@nielsdominguez991 Жыл бұрын

@@IBRACORP I ve bookmarked some of your videos, and I check them every time I need to deploy a website. Best content, thanks!

@IBRACORP Жыл бұрын

Appreciate you mate thank you ❤️

@ianneub9796 Жыл бұрын

Your videos are great, watched a couple of them! But how can you be interested in security and privacy and use Google Products, that's a bit odd to me :)