🚀Project Manager

☁️Cloudflare Setup

Step-by-step DNS configuration to route projectmanager.rifaterdemsahin.com through Cloudflare to Fly.io with TLS.

☁️ Cloudflare → Fly.io DNS Setup

Route traffic for projectmanager.rifaterdemsahin.com from Cloudflare to the Fly.io app project-manager.

🌐 Open Cloudflare DNS →🚀 Open Fly.io Dashboard →
1

🌐Get Fly.io IP Addresses

Prerequisite: the Fly app must already be deployed. Find the public IPv4 and IPv6 addresses assigned to your Fly.io app.

List current IPs:

fly ips list -a project-manager

If no IPs are assigned yet, allocate them:

fly ips allocate-v4 -a project-manager fly ips allocate-v6 -a project-manager
ℹ️Note down the IPv4 (e.g. 66.241.124.x) and IPv6 addresses — you'll need them in Step 3.
2

🔒Add Custom Domain in Fly.io

Fly.io handles TLS certificate generation and routing via its edge proxy. Register the subdomain:

fly certs add projectmanager.rifaterdemsahin.com -a project-manager
ℹ️Fly will output validation records (such as an _acme-challenge CNAME record) if DNS challenge verification is required. Add those to Cloudflare if prompted.
3

📝Configure DNS Records in Cloudflare

Log in to the Cloudflare Dashboard, open rifaterdemsahin.com, and go to DNS → Records. Add:

TypeNameContent / ValueProxy status
Aprojectmanager<Your Fly.io IPv4 address>DNS only (Grey cloud)
AAAAprojectmanager<Your Fly.io IPv6 address>DNS only (Grey cloud)
💡Alternative: point a CNAME for projectmanager to project-manager.fly.dev with Proxy set to DNS only.
4

✅Verify Certificate Issuance on Fly.io

Check whether Fly.io has verified your DNS and provisioned the SSL/TLS certificate:

fly certs check projectmanager.rifaterdemsahin.com -a project-manager
ℹ️Once it shows Ready or Verified, the application is accessible via https://projectmanager.rifaterdemsahin.com.
5

🛡️Decide on Cloudflare Proxying (Orange Cloud)

Optional

If you want Cloudflare's CDN, caching, and DDoS protection:

  1. Switch the proxy status on your A and AAAA records in Cloudflare from DNS only to Proxied (orange cloud).
  2. Go to SSL/TLS in Cloudflare and set the encryption mode to Full (strict).
⚠️Never use "Flexible" SSL mode. Fly.io forces TLS connections and Flexible mode will trigger an ERR_TOO_MANY_REDIRECTS loop.

🎯 What to do on your Cloudflare DNS page

  1. Open your DNS records page.
  2. Click Add record → Type: A, Name: projectmanager, Content: your Fly.io IPv4, Proxy status: DNS only (grey cloud). Save.
  3. Click Add record → Type: AAAA, Name: projectmanager, Content: your Fly.io IPv6, Proxy status: DNS only (grey cloud). Save.
  4. (Later, optional) Switch both records to Proxied (orange cloud) and set SSL/TLS to Full (strict).

Get your IPs first: fly ips list -a project-manager