jacksquat

Excellent to hear! You're very welcome and quite frankly it made me take a look at my own set up and realize that I was in the same boat.

That looks like a DNS issued I'd think. Maybe double check the tunnel and your DNS records just to make sure they're pointing correctly?

So sorry, it's been a while.... Add the following actions:

1. Browser integrity check (Then turn off)
2. Disable RUM
3. Disable Zaraz
4. Email Obfuscation (Then turn off)
5. Fonts (Then turn off)
6. Hotlink Protection (Then turn off)
7. Opportunistic Encryption (Then turn off)
8. Rocket Loader (Then turn off)

I've left all of the actions off

Hope it helped!

Oops sorry about that, you want them all as configuration rules

Set the SSL mode to "Full". Then go to "Rules" and create three rules. This is also the order in which they should be processed:

1.
Name: lemmy u all
Custom filter expression: URI path equals /u/*
All other options disabled.

2.
Name: lemmy nodeinfo all
Custom filter expression: URI path equals /nodeinfo/*
All other options disabled.

3.
Name: lemmy inbox all
Custom filter expression: URI path equals /inbox/*
All other options disabled.

This should get your instance running behind Cloudflare's tunnel.

*edited for formatting

So far so good with my change. :)

Ah ok got it. For me personally that's about really all I want I guess. Watchtower has been so rock solid for me for so long that I just want to make sure it's at least kept up to date. Thanks!

Nice, thank you for the reply. That's kind of how I was feeling about it but wasn't sure if I was missing something about it that was highly regarded.

Here is a fork of watchtower that is meant to keep things up to date that might work for you. I haven't tried it yet but am setting it up now.

I've used Erugo a few times and been happy with it. Not sure if it does everything you need but worth checking out.