Join the community today
Register Now

Cloudflare Cloudflare configuration with Centminmod

Discussion in 'Web Development & Web Performance' started by adamus007p, Apr 11, 2020.

Tags:
  1. adamus007p

    adamus007p Member

    371
    18
    18
    Feb 8, 2019
    Ratings:
    +36
    Local Time:
    9:22 PM
    Hello,

    May you share your advices about configuration centminmod with Cloudflare?

    I am looking for Free account and pro.

    What to do on Centminmod, what to set on Cloudflare side.


    Is there any helpful guide or recommendations?

    Good practices etc.
     
    Last edited: Apr 11, 2020
  2. eva2000

    eva2000 Administrator Staff Member

    55,805
    12,272
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,858
    Local Time:
    5:22 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
  3. adamus007p

    adamus007p Member

    371
    18
    18
    Feb 8, 2019
    Ratings:
    +36
    Local Time:
    9:22 PM
    Thank you. Very helpful posts.


    How to manage with SSL, when I have 2 different VPS?
    Now I had to use API to connect to route53 and renew SSL as I use geoIP.
    How to renew SSL with geoDNS with cloudflare?



    Is there any guide how to configure Cloudflare itself?

    Is there any options that I should to use?
    Browser Cache TTL change to 1month
    Caching Level or use API
    Auto Minify on
    Brotli on
    Rocket Loader™ on
    I see also Railgun™ but this is available for Bussness or Cloudflare partners.
     
  4. eva2000

    eva2000 Administrator Staff Member

    55,805
    12,272
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,858
    Local Time:
    5:22 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Cloudflare SSL is enabled by default in Flexible SSL mode which talks to non-HTTPS origin Nginx. If you have Centmin Mod Nginx setup with HTTPS default, you need to change Cloudflare in SSL dashboard tab to Full SSL instead of Flexible SSL so it talks to HTTPS origin Nginx. Other than that Cloudflare auto renews it's SSL certificate without your intervention.

    Read the linked guides as to what you should enable, each option in Cloudflare dashboard has a help link which expands to explain what the feature does
     
  5. Rake-GH

    Rake-GH Active Member

    179
    93
    28
    Jul 29, 2019
    USA
    Ratings:
    +144
    Local Time:
    3:22 PM
    default
    default
    Browser Cache TLL 1 month is probably too long, I use 24 hours, cloudflare is gonna cache most of the request anyways

    Caching Level = Standard is most common, I wouldn't touch it unless you know what you're doing

    Auto minify = yes

    Brotli = yes, if you do it on cloudflare, it's recommended not to do it server side, let the CDN handle it

    Rocket Loader you can try, but it will break most sites, in my experience 5% of javascript scripts get broken by it, especially when ajax is mixed in. It speeds up page paint time significantly but IMO it's better to just leave it disabled.

    I have a video tutorial series on setting up centminmod using Cloudflare, it may be helpful Install - Beginner CentMinMod Installation Video Tutorials

    I would definitely practice setting it all up on a test server and experimenting with it. The documentation here and on Cloudflare's site is also very good so make sure you study up
     
  6. adamus007p

    adamus007p Member

    371
    18
    18
    Feb 8, 2019
    Ratings:
    +36
    Local Time:
    9:22 PM
  7. pamamolf

    pamamolf Well-Known Member

    4,101
    428
    83
    May 31, 2014
    Ratings:
    +838
    Local Time:
    10:22 PM
    Nginx-1.26.x
    MariaDB 10.6.x
    I think that now they use as default the Full ssl ...

    At least that was the case for me for the last two domains that i add....
     
  8. adamus007p

    adamus007p Member

    371
    18
    18
    Feb 8, 2019
    Ratings:
    +36
    Local Time:
    9:22 PM
    What about to switch other options like
    http3?
    is it worth to switch on?
     
  9. pamamolf

    pamamolf Well-Known Member

    4,101
    428
    83
    May 31, 2014
    Ratings:
    +838
    Local Time:
    10:22 PM
    Nginx-1.26.x
    MariaDB 10.6.x
    Not yet as browsers not supported by default...
     
  10. adamus007p

    adamus007p Member

    371
    18
    18
    Feb 8, 2019
    Ratings:
    +36
    Local Time:
    9:22 PM
    HTTP3 there is no backward compatibility?

    is there is no http3 it will connect using http2 or 1.1 ?
     
  11. eva2000

    eva2000 Administrator Staff Member

    55,805
    12,272
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,858
    Local Time:
    5:22 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    HTTP/3 will fall back to HTTP/2 or HTTP/1.1 just that browsers by default don't support HTTP/3 unless you add command line flags to your browser start up options so your visitors would need to do that in their own browsers right now.