DNS & SSL Setup

Domain Configuration

• A record -> server IP
• CNAME for www -> root domain
• MX records for email
• TXT for SPF/DKIM/DMARC

Cloudflare Setup

• Proxy enabled (orange cloud)
• SSL mode: Full (Strict)
• Always Use HTTPS: On
• Minimum TLS: 1.2
• HSTS enabled

SSL with Let's Encrypt

• Certbot for automated renewal
• Auto-renew cron (monthly)
• Test renewal: certbot renew --dry-run