Using nginx-proxy with cloudflare full ssl config

I’m unable to use cloudflare with nginx-proxy. Because I’m using full ssl config (which requires HTTPS connection between server and cloudflare) there’s something that’s not working.

Here’s simple network graph:

                                                                          +----HTTP----> Virtual host 1
                                                                          |
User ------ HTTPS -----> Cloudflare ------ HTTPS ------> nginx-proxy -----|----HTTP----> Virtual host 2
                                                                          |
                                                                          +----HTTP----> Virtual host 3

Here’s my compose config:

version: '3.4'

services:
  db:
    image: mdillon/postgis
    volumes:
      - "/var/docker/postgresql/.sock:/var/run/postgres/postgres.sock"
      - "/var/docker/postgresql/data:/var/lib/postgresql/data"
      - "/var/docker/postgresql/initdb:/docker-entrypoint-initdb.d/"

  proxy:
    image: jwilder/nginx-proxy
    volumes:
      - "/var/run/docker.sock:/tmp/docker.sock:ro"
      - "/var/docker/certs:/etc/nginx/certs"
    ports:
      - "80:80"
      - "443:443"

# virtual servers ...

Result:

[themisir]

@TheMisir I am struggling with the same right now.

Can you guide me on how you named your .pem, .key and .cert files? And what environment vars did you have to set on your containers?

I issued origin certificates for domain.com and *.domain.com then I get only one certificate for root domain and subdomains. Renamed certificate to “domain.com.crt” (not .pem) and key to “domain.com.key” (as described here).

I hope it works. If it doesn’t:

What I did next is I’m not sure it really helped or not but I think worth trying.

I turned on then off the switch labeled “Authenticated Origin Pulls”. And website become available after doing that but I’m not sure if it was really helped.

[themisir]

Also, did you setup docker-letsencrypt-nginx-proxy-companion? It’s missing from the configuration you posted.

No I have not installed “docker-letsencrypt-nginx-proxy-companion”.

The issue was solved by itself after a few days. I think the issue is related to cloudflare cache.