• Welcome to the Chevereto user community!

    Here users from all over the world gather around to learn the latest about Chevereto and contribute with ideas to improve the software.

    Please keep in mind:

    • 😌 This community is user driven. Be polite with other users.
    • 👉 Is required to purchase a Chevereto license to participate in this community (doesn't apply to Pre-sales).
    • 💸 Purchase a Pro Subscription to get access to active software support and faster ticket response times.
  • Chevereto Support CLST

    Support response

    Support checklist

    • ⚠️ Got a Something went wrong message? Read this guide and provide the actual error. Do not skip this.
    • ✅ Confirm that the server meets the System Requirements
    • 🔥 Check for any available Hotfix - your issue could be already reported/fixed
    • 📚 Read documentation - It will be required to Debug and understand Errors for a faster support response

CloudFlare 'Page Rules' & Global HTTPS

A

akchev

Chevereto Member
Hi @Rodolfo ,

I would like to install Chevereto on a domain name that is linked up with CloudFlare and I have a few questions to achieve a proper set-up.

I have an active SSL Certificate on my server and I have set CloudFlare's SSL settings to "Full Strict" ...

I also have a total of 2 'Page Rules' on CloudFlare which 301 the http://, http://www and https://www versions of my domain to https://domain.etc

Those Page Rules are...

1) http://*domain.etc/* >> https://domain.etc/$2

2) https://www.domain.etc/* >> https://domain.etc/$1

These Page Rules allow all traffic to pass-through the 'Full Strict' SSL security via CloudFlare...

Based on the information I have provided; how would I properly enable CloudFlare on Chevereto's end? The goal is to ensure HTTPS sitewide without altering that proper passthrough via my Page Rules. *I spoke with CloudFlare and .htaccess 301's to achieve proper SSL security is not the proper way of doing it as it avoids their passthrough. They recommended Page Rules.

Also, two more questions...

1) Would enabling the CloudFlare "Autominify" options for CSS, JS and HTML break any Chevereto code? If so, which ones should be enabled and which ones should be disabled?

2) Would setting "Rocketloader" to Automatic break any code?

I hope to hear back from you soon regarding this because it is important my set-up is 100% proper and secure. Thank you regardless.
 
In Chevereto dashboard you have an option to turn on/off CloudFlare which will be used to get the true visitor IP and that's all you need to toggle.

The https should be detected but it depends on CloudFlare (they must send the proper server headers) when using their certs. I've tested CloudFlare with chevereto.com (local certificate) and I remember that the only thing I did was to set “always SSL" in page rules. At this time I'm not using CloudFlare and I'm seeing that they changed some stuff but is mostly the same thing.

You should check the documentation, I have an step by step https guide for this. https://chevereto.com/docs/cloudflare

Regarding your other questions:

1. CloudFlare js and css minify isn't needed. Chevereto does that for you. Check dashboard > setttigs > system.

2. I strongly recommend you to avoid CloudFlare rocket loader, it breaks a lot of things and it is not needed for Chevereto.

Hope it helps.
 
Last edited:
You must log in or register to reply here.
Back
Top