<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Haproxy cloudflare issues]]></title><description><![CDATA[<p dir="auto">Here is details about my network setup:</p>
<p dir="auto">Cloudflare, SSL Strict &gt; PFSense HaProxy &gt; ProxmoxVM &gt; Server &gt; Nginx &gt; Port 80 website</p>
<p dir="auto">I am getting a error: ERR_SSL_VERSION_OR_CIPHER_MISMATCH when ever it try to access https://thetechnologystudio.com/</p>
<p dir="auto">Ha-Proxy Settings:<br />
General Settings:<br />
Maximum Connections: 256<br />
Internal Stats Port: 2200<br />
Remote syslog host: /var/run/log<br />
Max SSL Diffie-Hellman size: 2048<br />
Custom Options: Empty no data</p>
<p dir="auto">Front end:<br />
Name: thetechnologystudio.com<br />
External address:</p>
<p dir="auto">Listen Address: WAN address (IPv4)<br />
Port: 443<br />
SSL Offloading: Checked</p>
<p dir="auto">Type: http / https(offloading)<br />
ACL<br />
name: TTSMainLinux<br />
Expression: Host matches:<br />
cs: no<br />
Not: no<br />
Value: thetechnologystudio.com</p>
<p dir="auto">Actions:<br />
Conditional acl names: TTSMainLinux<br />
backend: TTSMainLinux</p>
<p dir="auto">SSL Offloading<br />
Certificate: tts-certs<br />
Add ACL for certificate CommonName. (host header matches the "CN" of the certificate): not checked<br />
Add ACL for certificate Subject Alternative Names: Checked</p>
<p dir="auto">Backend:<br />
name: TTSMainLinux</p>
<p dir="auto">Server List<br />
Mode: active<br />
name: thetechnologystudio.com<br />
forwardto: address+port<br />
address: 192.168.1.5<br />
port: 80<br />
Encrypt(SSL): no<br />
SSL checks: no</p>
<p dir="auto">CA: Acmecert: O=Let's Encrypt,<br />
Client Certificate: tts-certs (CA: acmecert: ....</p>
<p dir="auto">Nginx Site Config:</p>
<pre><code>server {
	listen 80;
	listen [::]:80;
	
      server_name thetechnologystudio.com;
      root /var/www/html/test;
	  index index.php index.html index.htm index.nginx-debian.html;
		
	location / {
		try_files $uri $uri/ =404;
    if ($request_method = OPTIONS ) {
        add_header Access-Control-Allow-Origin "https://thetechnologystudio.com";
        add_header Access-Control-Allow-Methods "GET, OPTIONS";
        add_header Access-Control-Allow-Headers "Authorization";
        add_header Access-Control-Allow-Credentials "true";
        add_header Content-Length 0;
        add_header Content-Type text/plain;
        return 200;
    }
	}
   
	location ~ \.php$ {
		include snippets/fastcgi-php.conf;

		# Nginx php-fpm sock config:
		fastcgi_pass unix:/run/php/php8.1-fpm.sock;
		# Nginx php-cgi config :
		# Nginx PHP fastcgi_pass 127.0.0.1:9000;
	}
  
	location ~ /\.ht {
		deny all;
	}
}
</code></pre>
<p dir="auto">Webpage:<br />
index.php</p>
<pre><code>&lt;?php
  phpinfo();
?&gt;
</code></pre>
<p dir="auto">Let me know if theres anything else that you need to assist me in diagnosing and fixing this issue.</p>
]]></description><link>https://forum.netgate.com/topic/180756/haproxy-cloudflare-issues</link><generator>RSS for Node</generator><lastBuildDate>Fri, 17 Apr 2026 10:12:02 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/180756.rss" rel="self" type="application/rss+xml"/><pubDate>Sun, 11 Jun 2023 05:19:13 GMT</pubDate><ttl>60</ttl></channel></rss>