jacksquat

So sorry, it's been a while.... Add the following actions:

1. Browser integrity check (Then turn off)
2. Disable RUM
3. Disable Zaraz
4. Email Obfuscation (Then turn off)
5. Fonts (Then turn off)
6. Hotlink Protection (Then turn off)
7. Opportunistic Encryption (Then turn off)
8. Rocket Loader (Then turn off)

I've left all of the actions off

Hope it helped!

Oops sorry about that, you want them all as configuration rules

Set the SSL mode to "Full". Then go to "Rules" and create three rules. This is also the order in which they should be processed:

1.
Name: lemmy u all
Custom filter expression: URI path equals /u/*
All other options disabled.

2.
Name: lemmy nodeinfo all
Custom filter expression: URI path equals /nodeinfo/*
All other options disabled.

3.
Name: lemmy inbox all
Custom filter expression: URI path equals /inbox/*
All other options disabled.

This should get your instance running behind Cloudflare's tunnel.

*edited for formatting

So far so good with my change. :)

Ah ok got it. For me personally that's about really all I want I guess. Watchtower has been so rock solid for me for so long that I just want to make sure it's at least kept up to date. Thanks!

Nice, thank you for the reply. That's kind of how I was feeling about it but wasn't sure if I was missing something about it that was highly regarded.

Here is a fork of watchtower that is meant to keep things up to date that might work for you. I haven't tried it yet but am setting it up now.

I've used Erugo a few times and been happy with it. Not sure if it does everything you need but worth checking out.

Thanks for the heads up!

Honestly Cloudflare Tunnels could be a very simple way to do it. I've always had tremendous luck with it. By using CF you can let them do all the heavy lifting instead of hosting your own... as long as you trust them.