Adding SSL certs via cloudflare

Discord user AllAboutJake has written this quick guide to adding SSL certs via cloudflare

For those who want to install SSL certs on their femto fox and cloudflare to manage their DNS:

1. Run as Root

sudo su

2. Install acme.sh -- this also installs a cron job to renew

curl https://get.acme.sh | sh -s email=<email>

3. Setup your Cloudflare DNS keys/IDs

export CF_Token="<Cloudflare Token>"
export CF_Account_ID="<Cloudlare Account ID>"
export CF_Zone_ID="<Cloudflare ZoneID>"

4. Issue the cert, using Cloudflare DNS to prove ownership of the hostname

acme.sh --issue --dns dns_cf -d <hostname/domain name>

5. Install the cert in /etc/meshtasticd/ssl

acme.sh --install-cert -d <hostname/domain name> \
     --key-file /etc/meshtasticd/ssl/private_key.pem \
     --fullchain-file /etc/meshtasticd/ssl/certificate.pem \
     --reloadcmd      "systemctl restart meshtasticd"

Notes:

You need to have your local IP's (192.168.x.x) exposed as a domain/hostname via Cloudflare DNS, but you don't need to have the femto exposed on the internet for traditional "Lets Encrypt Host verifcation" which puts a file on a webserver then checks that the file exists on the public web server. This will add TXT records to your DNS host info to prove ownership of the hostname through cloudflare api and then remove them once the cert is issued,

Adding SSL certs via cloudflare

1. Run as Root

2. Install acme.sh -- this also installs a cron job to renew

3. Setup your Cloudflare DNS keys/IDs

4. Issue the cert, using Cloudflare DNS to prove ownership of the hostname

5. Install the cert in /etc/meshtasticd/ssl

Notes:

Getting started

USB Configuration Tool

Command Line Config Tool

Femtofox Pinout

Boot Codes

Building Foxbuntu (WSL)

Building Foxbuntu (Mac)

SSL Certs

System Scripts

Supported Hardware

Community Hardware