Letsencrypt cannot auto-renew when site behind Cloudflare?

Virtualmin
1

Hello,

I have a site which I put an SSL certificate from Letsencrypt.
I then moved the site to be behind Cloudflare’s systems so basically when someone visits the site it is served from an IP of Cloudflare (proxy).
So far all OK.
When the auto-renewal however comes for the certificate it fails because Letsencrypt does not match the server making the request and the actual IP serving the domain.

Is there anything that can be done to fix this so it works without having to remove Cloudflare from the equation when the certificate needs to be renewed?

Any help is much appreciated!

2

Based on what CF have to say - if Vm dont have an option for different method of validation (like DNS or HTTP) you will never be able to validate your certificate. So only option is to do it manually, e.g. not using Vm for this job.

More info: https://support.cloudflare.com/hc/en-us/articles/214820528-How-to-Validate-a-Let-s-Encrypt-Certificate-on-a-Site-Already-Active-on-CloudFlare