cloudflare support for ssl and api not working

JAY

any one facing same issues i installed fresh site is up and db and others are working my dns is under Cloudflare now iam trying to install ssl under Cloudflare its not working and even tried with api mot working i need to disable dns under cf and iam able to install ssl.

aaPanel_Jose

JAY
Is the key you entered a global key? I just tested and it works fine

JAY

i tried zone id and account id ,what about file verification under CF

aaPanel_Jose

JAY
File verification can be used directly under cf, we have no other restrictions

JAY

aaPanel_Jose
i tried on my domain i get error are you sure as i need to disable record and bypass directly the only iam able to install ssl other wise i get error and same with api tooo

any way iam installing os again and test and give you login check logs.

aaPanel_Jose

JAY
Okay, please send the panel login information to jose@aapanel.com and I will test it for you

sifyuyuspi

aaPanel API requires that the client IP in white list.

I'm using CloudFlare proxy to my panel. CloudFlare uses a lot of IP ranges.

Is it possible use a IP range on white list? Do I need add each single IP?

aaPanel_Jose

sifyuyuspi
No, why do you want to proxy your panel through cloudflare?

In addition, cloudflare should only be able to proxy port 80 443, how did you make it proxy other ports?

sifyuyuspi

Cloudflare provides two great main features: cache and security. I'm using cloudflare to proxy the panel just for security reasons.

Cloudflare helps

hide server IP
stop attacks with its firewall (an additional WAF)

Cloudflare supports many ports, not just 80 and 443. You can read more about it here: https://blog.cloudflare.com/cloudflare-now-supporting-more-ports/amp/

My all websites is proxies by cloudflare, and the server firewall only allow access to cloudflare IPs ranges. It prevents port scanners and avoid direct attacks.

sifyuyuspi

Since it isn't possible use IP ranges for now, is it possible request this feature?

Jimmy

HTTPS ports supported by CloudFlare:

https://support.cloudflare.com/hc/en-us/articles/200169156-Identifying-network-ports-compatible-with-Cloudflare-s-proxy

Use HTTPS ports to your server to not expose your server IP.

Also with CloudFlare you can add custom firewall rules, page rules, etc to block specific paths, countries, IP ranges etc. You can use a combine of nginx web server, free waf firewall (nginx) and CloudFlare, all these together for better security results. Also with a whitelist IP setting on CloudFlare and in aapanel WAF you can set a proxy/squid (with authorised access) and all admins and members of project can access without these restrictions to the project. With this way you can protect server and project from attacks, etc...

sifyuyuspi

Jimmy it is exactly what i am doing

Jimmy

sifyuyuspi
Nice 😃 me too!