Skip to main content
This tutorial guides you through configuring Cloudflare as a domain provider for applications deployed on Qovery. The process involves adding a custom domain and establishing proper DNS and SSL/TLS settings.

​
Prerequisites

  • Active Qovery application
  • Domain ownership on Cloudflare or registrar
  • Access to Cloudflare DNS settings

​
Step 1: Add a Custom Domain

  1. Access your application settings in Qovery Console
  2. Navigate to the Domains section
  3. Enter your Cloudflare-managed domain
  4. Critical: Enable the “Domain behind a CDN” toggle
Enabling “Domain behind a CDN” automatically disables certificate generation since Cloudflare handles SSL/TLS management.
Add custom domain

​
Step 2: Configure Cloudflare DNS

​
Add CNAME Entry

  1. Go to Cloudflare DNS settings
  2. Add a CNAME entry using values provided by the Qovery Console
  3. The proxy mode can remain enabled
Cloudflare CNAME configuration
CNAME record details

​
Step 3: Configure SSL/TLS Settings

The last step to configure the domain Cloudflare side properly is to use the Full TLS encryption for proper custom domain functionality.
  1. Navigate to SSL/TLS settings in Cloudflare
  2. Select Full encryption mode
SSL/TLS Full encryption
Using “Flexible” encryption mode will not work properly with Qovery. Always use “Full” or “Full (strict)” mode.

​
Step 4: Access Restriction Options

You have two options for restricting access to your application:

​
Option 1: IP Whitelisting

Add Cloudflare IP ranges to Qovery’s advanced settings to allow only Cloudflare traffic.
IP whitelisting configuration

​
Option 2: Cloudflared Tunnel

Cloudflared establishes outbound tunnels between resources and Cloudflare’s network, enabling tunnel-based access without public exposure.
Cloudflared tunnel setup
Tunnel configuration

​
Verification

Once configured, your application should be accessible via your custom domain through Cloudflare’s network.
Domain verification
SSL certificate verification

​
Additional Configuration

​
Advanced Cloudflare Features

You can leverage Cloudflare’s additional features:
Cloudflare WAF
Firewall rules
Page rules
Analytics dashboard

​
Troubleshooting

  • Verify CNAME record is correct
  • Check DNS propagation (can take up to 48 hours)
  • Ensure proxy mode is enabled in Cloudflare
  • Confirm “Full” encryption mode is selected
  • Wait for SSL certificate provisioning (5-10 minutes)
  • Check that “Domain behind a CDN” toggle is enabled in Qovery
  • Verify application is running in Qovery
  • Check that the CNAME points to the correct Qovery domain
  • Ensure Cloudflare IP ranges are whitelisted if using IP restriction

Custom Domains

Learn about custom domain configuration

SSL/TLS Certificates

Understand SSL/TLS certificate management

Advanced Settings

Configure advanced service settings

Networking

Learn about networking and ingress