Using Cloudflare with Jukto
If your domain's DNS is on Cloudflare: set the records yourself with the proxy off (grey cloud), or connect Cloudflare and let Jukto add them for you.
Cloudflare is a popular place to manage a domain's DNS. It works well with Jukto, with one rule you must follow: the records that point to Jukto must be DNS only, which Cloudflare shows as a grey cloud. This guide shows both ways to set it up.
Before you start#
- Your domain is added to Cloudflare, and its nameservers at your registrar are Cloudflare's. Check that the zone is active in your Cloudflare dashboard.
- You added the domain in Jukto and have its records ready: Connect your own domain.
The one setting that matters: proxy status#
In Cloudflare every record has a Proxy status next to it.
| Proxy status | Cloud | What it means for Jukto |
|---|---|---|
| DNS only | Grey | Correct. DNS answers with the real address, so Jukto can check the record and issue the HTTPS certificate |
| Proxied | Orange | Do not use for the Jukto records. Jukto's edge needs the real address, so the check and the certificate can fail |
Jukto's screen says the same: keep the records "DNS only" (no proxy).
Way 1: add the records yourself#
- 1
Open DNS in Cloudflare
Sign in to Cloudflare, choose your domain, and open its DNS records.
- 2
Add the TXT record
Add a record of type TXT with the name and value that Jukto shows (the name starts with
_jukto-verify). - 3
Add the CNAME or A record
For a subdomain add a CNAME; for the bare domain add an A record. Use the values Jukto shows.
- 4
Make the cloud grey
Click the orange cloud so it turns grey: DNS only. Save.
- 5
Check in Jukto
Open Settings > Domain and press Check DNS now. See the flow in Connect your own domain.
Way 2: let Jukto add the records#
Connect Cloudflare once, and Jukto writes the records for you.
- 1
Create a token in Cloudflare
In Cloudflare open My Profile, then API Tokens, and press Create Token. Use the "Edit zone DNS" template and make sure the permissions are Zone > DNS > Edit and Zone > Zone > Read. Under Zone Resources choose Include, Specific zone and select your domain. Create the token and copy it now, because Cloudflare shows it only once.
- 2
Connect it in Jukto
Open Settings > Domain, tab Cloudflare. Paste the token into API token and type the domain exactly as Cloudflare lists it, without www, into Zone (domain) name. Press Save, Test connection and Turn on.
- 3
Add the records
Add your domain as usual. Under its DNS records press Add DNS records automatically. Jukto writes the TXT and the CNAME or A record into your zone and then runs the DNS check.
What the button does:
- It creates records that are missing, changes a CNAME or A record that points elsewhere, and leaves a record that is already right.
- A TXT record with other content gets a second record beside it; nothing is deleted.
- Every record is set to DNS only.
- It lists each record as Created, Updated, Already there or Failed, with Cloudflare's own words for a failure.
A domain bought through Jukto, with Cloudflare DNS#
If you bought the domain through Jukto and want Cloudflare to run its DNS, open the domain's DNS and nameservers, choose My own nameservers, and enter Cloudflare's two nameservers. Jukto then stops managing the records, so the records for your website (and your email) must also exist in Cloudflare. You can switch back to Jukto DNS (recommended) at any time. See Buy a domain through Jukto.
Common problems#
The check says the CNAME or A points somewhere else
Look at the cloud. If it is orange, click it to turn it grey (DNS only), then press Check DNS now. Also remove other A, AAAA or CNAME records for the same name.
The certificate could not be issued
The records must be correct and DNS only. Press Check DNS now to retry.
"Cloudflare is not connected for this domain's zone"
The button works only for a domain inside the zone you connected. Check the zone name in the Cloudflare tab.
Test connection fails
Check the token has Zone > DNS > Edit and Zone > Zone > Read for your zone, and that the zone name matches.
Comments (0)
Anyone can comment. Please do not post phone numbers, passwords or customer details.