From c27ae106fef3443857848b4a574c2e25d2f847bc Mon Sep 17 00:00:00 2001 From: David Bernheisel Date: Fri, 26 Aug 2022 10:19:21 -0400 Subject: [PATCH] Add Troubleshooting section There is a Cloudflare setting that interferes with SSL cert validation. Advise to disable this feature. --- app-guides/custom-domains-with-fly.html.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/app-guides/custom-domains-with-fly.html.md b/app-guides/custom-domains-with-fly.html.md index d8fe17b534..7e38c82826 100644 --- a/app-guides/custom-domains-with-fly.html.md +++ b/app-guides/custom-domains-with-fly.html.md @@ -399,6 +399,12 @@ The GraphQL mutation returns the app name and the hostname and certificate id th } ``` +## Troubleshooting + +**I use Cloudflare, and my fly.io SSL certificate doesn't seem to issue** + +If you're using Cloudflare, you might be using their Universal SSL feature which inserts a TXT record for `_acme_challenge.mydomain` that interferes with our cert validation. You should disable this feature, and verify by running `dig txt _acme-challenge.mydomain.com +short` to see if it returns with a fly address. + ## Wrapping up You have everything you need to either hand assign a custom domain to your Fly application or to create your own automated multi-domain proxy. Let your ideas take flight with Fly.