# Help with SSL Encryption **URL:** \ **Category:** Developer help\ **Created:** [November 13, 2018, 5:38pm UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056 "2018-11-13T17:38:45Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Astro](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Astro](https://forum.ghost.org/u/Astro)\ **Post date:** [November 13, 2018, 5:38pm UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/1 "2018-11-13T17:38:45Z")
I’m currently trying to set up my first Ghost blog through the 1-Click app at DigitalOcean and I have a question regarding SSL encryption. During the Ghost installation process (Ghost-CLI), HTTPS gets automatically set up though Let’s Encrypt. However, I would like to use a Cloudflare account for DNS settings and SSL encryption. Once the Ghost setup was done, I redirected my IP to my Cloudflare and domain. At that point, blog was not accessible through my domain as I would get a redirect error (it worked when accessing through the IP address though). I went into the encryption settings inside my Cloudflare account and changed the settings from ‘Flexible’ to ‘Full’. That seemed to work and make my site accessible. Here’s my question: Will the SSL certificate ‘overwrites’ itself with Cloudflare’s even after installing Let’s Encrypt? Or is there a better way to do this? I hope my question makes sense, I’m very new at this. ---
**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\ **Post date:** [November 13, 2018, 11:34pm UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/2 "2018-11-13T23:34:34Z")
I think the information you’re looking for can be found on this post 🙂 > [@How to remove Let's encrypt SSL](https://forum.ghost.org/t/how-to-remove-lets-encrypt-ssl/1272/4): > > This might be more information than you asked for, but it’s a useful primer for using CloudFlare smile Cloudflare serves as a middleman between your user and you, so when the user requests your site the request will first go to CloudFlare, and if CloudFlare doesn’t have the asset the user is looking for it will ask your you. That means there are 2 separate connections - the one between the user and CloudFlare, and the one between CloudFlare and you. You can disable SSL between you and Cloud… ---
**Author:** ![Astro](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Astro](https://forum.ghost.org/u/Astro)\ **Post date:** [November 14, 2018, 1:21am UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/3 "2018-11-14T01:21:28Z")
Thanks a lot for your reply! I am not sure if I understand everything. Are you saying that we should keep both Let’s Encrypt and CloudFlare SSL? Also, what is the difference between Full and Full (strict)? Which one would you recommend? ---
**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\ **Post date:** [November 14, 2018, 1:25am UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/4 "2018-11-14T01:25:24Z")
Yes, you need both LE and CF SSL enabled if you want connections to your site to be fully secure 🙂 Here’s a breakdown of the CF SSL Options: [https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-](https://support.cloudflare.com/hc/en-us/articles/200170416-What-do-the-SSL-options-mean-) I use Full (Strict) 99% of the time 🙂 ---
**Author:** ![Astro](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Astro](https://forum.ghost.org/u/Astro)\ **Post date:** [November 14, 2018, 1:27am UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/5 "2018-11-14T01:27:32Z")
Thank you very much, you’ve been very helpful! 😀 ---
**Author:** ![Astro](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Astro](https://forum.ghost.org/u/Astro)\ **Post date:** [November 14, 2018, 1:34am UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/6 "2018-11-14T01:34:43Z")
I have another question if you don’t mind 🙂 During the installation of Ghost (through DigitalOcean’s 1-Click app, I noticed that this message comes up during the setup: > Once complete, you are encouraged to run mysql\_secure\_installation to ready your server for production. Do I need to do something? Or does the 1-Click app do everything for me? ---
**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\ **Post date:** [November 14, 2018, 1:39am UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/7 "2018-11-14T01:39:56Z")
I’m not entirely sure, I haven’t run a set up via the 1-click installation 😕 ---
**Author:** ![Astro](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Astro](https://forum.ghost.org/u/Astro)\ **Post date:** [November 14, 2018, 7:38pm UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/8 "2018-11-14T19:38:01Z")
Ok no problem. Do you know why setting to “Full” works but setting it to “Full (Strict)” sends to a Bad Getaway error? ---
**Author:** ![system](https://us1.discourse-cdn.com/flex015/uploads/ghost2/original/2X/b/ba9ce5100b8bb264586f4f572545596b2ce3f081.png) [@system](https://forum.ghost.org/u/system)\ **Post date:** [November 28, 2018, 7:38pm UTC](https://forum.ghost.org/t/help-with-ssl-encryption/4056/9 "2018-11-28T19:38:04Z")
Closed on November 28, 2018, 7:38pm UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.