Cloudflare Domains SSL Cloudflare 521 + Centminmod

If you use a reverse proxy in front of Centmin Mod Nginx, you need to setup nginx realip to be passed onto Nginx.

See Getting Started Guide step 4 and setting correct real ip via nginx module config at http://centminmod.com/nginx_configure_cloudflare.html.

If using Centmin Mod 123.09beta01 and newer, there's an added tools/csfcf.sh script to aid in this. Details at:

• Beta Branch - csfcf.sh - automate Cloudflare Nginx & CSF Firewall setups | Centmin Mod Community
• Beta Branch - add cloudflare.conf include file support | Centmin Mod Community

You just need to setup a cronjob to run

Code (Text):

/usr/local/src/centminmod/tools/csfcf.sh auto

and ensure your nginx.conf http{} context has the include file /usr/local/nginx/conf/cloudflare.conf and/or your individual nginx vhost's server contexts has the same include file

Code (Text):

http {
map_hash_bucket_size 128;
map_hash_max_size 2048;
server_names_hash_bucket_size 128;
server_names_hash_max_size 2048;

limit_req_zone $binary_remote_addr zone=xwplogin:16m rate=40r/m;
#limit_conn_zone $binary_remote_addr zone=xwpconlimit:16m;

more_set_headers "Server: nginx centminmod";
more_set_headers "X-Powered-By: centminmod";

include /usr/local/nginx/conf/cloudflare.conf;
include /usr/local/nginx/conf/maintenance.conf;
include /usr/local/nginx/conf/vts_http.conf;
include /usr/local/nginx/conf/geoip.conf;
#include /usr/local/nginx/conf/pagespeedadmin.conf;
include /usr/local/nginx/conf/fastcgi_param_https_map.conf;

Then restart nginx server via command shortcut

Code (Text):

ngxrestart

or

Code (Text):

service nginx restart

 

if you use full SSL you need to make sure to remove any centmin mod nginx http to https redirects otherwise you can go into a redirect loop

 

if you turn cloudflare ssl off, all https requests are redirected to non-https which will cause issues if you only have https nginx site so do not turn off ssl at cloudflare level

 

are you using 123.09beta01 or 123.08stable ? the csfcf.sh script is only available in 123.09beta01

what is exact output for these 2 commands

Code (Text):

/usr/local/src/centminmod/tools/csfcf.sh auto

Code (Text):

cd /usr/local/src/centminmod
git branch

for posting code or output from commands to keep the formatting, you might want to use CODE tags for code How to use forum BBCODE code tags

 

you're using 123.08stable so csfcf.sh doesn't exist.

So you need to follow Getting Started Guide step 4 and setting correct real ip via nginx module config at Nginx Cloudflare & Incapsula (reverse proxy HttpRealIpModule) - CentminMod.com LEMP Nginx web stack for CentOS to do it manually instead for setting up real ip detection in Nginx.

If only using Centmin Mod 123.09beta01 and newer, there's an added tools/csfcf.sh script to aid in this. Details at:

• Beta Branch - csfcf.sh - automate Cloudflare Nginx & CSF Firewall setups | Centmin Mod Community
• Beta Branch - add cloudflare.conf include file support | Centmin Mod Community