HOW TO: Recommended Cloudflare Settings

[vaise 340]

6 hours ago, crusher11 said:

My domain appears to be broken. Not sure when or why that happened; I can still connect remotely in the Android app, however that works, but when I enter the domain in my web browser I get either an “Hmm. We’re having trouble finding that site.” error from my browser or an “SSL handshake failed” error from CloudFlare depending on whether I enter mydomain.com or www.mydomain.com.

I can still get there with my IP address, though I was under the impression something in my NGINX config was supposed to prevent that.

I've changed nothing recently.

I specifically don’t allow the web to work as it often transcodes so mine is blocked by the Cf WAF rules.  Only emby apps can work.  The side affect of that is that 99% of the bot attacks go to the subdomain itself so they also get blocked.   

[crusher11 1254]

28 minutes ago, vaise said:

I specifically don’t allow the web to work as it often transcodes so mine is blocked by the Cf WAF rules.  Only emby apps can work.  The side affect of that is that 99% of the bot attacks go to the subdomain itself so they also get blocked.   

I don't know what that means or how it applies to my issue.

[vaise 340]

4 minutes ago, crusher11 said:

I don't know what that means or how it applies to my issue.

CF can be very technical yes.  And I am only using 1% of it......

 

[C.S. 99]

On 5/14/2026 at 7:38 AM, crusher11 said:

I can still connect remotely in the Android app, however that works, but when I enter the domain in my web browser I get either an “Hmm. We’re having trouble finding that site.” error from my browser or an “SSL handshake failed” error from CloudFlare depending on whether I enter mydomain.com or www.mydomain.com.

Is that browser on the same android device?

[crusher11 1254]

3 hours ago, C.S. said:

Is that browser on the same android device?

It wasn't, but I get similar errors on a browser that is.

[crusher11 1254]

Well, having changed nothing, it now works fine.

[crusher11 1254]

And still having changed nothing, I'm again unable to access my server remotely. I'm getting a CloudFlare timeout error when I attempt to access my domain, and a browser timeout error when I attempt to access my WAN IP.

[crusher11 1254]

I have CloudFlare blocking traffic from outside Australia, but I just had two failed login attempts from an IP that seems to be located in Hong Kong?

[troyhough 61]

1 hour ago, crusher11 said:

I have CloudFlare blocking traffic from outside Australia, but I just had two failed login attempts from an IP that seems to be located in Hong Kong?

Same here. 

152.175.29.59

Hong Kong

[crusher11 1254]

Yep, same IP.

[vaise 340]

I have not seen that (also in Australia), however I also block anything going to my sub domain itself, which is where bots would go I imagine.  I ONLY allow /web /emby and a few others I have collected over the years that allow emby to work - but the emby.mydomain.com will be blocked.  I also have an elaborate set of other block rules for stuff that maximise the use of the free CF plan rules.