diff --git a/docs/knowledge-base/cloudflare/tunnels/full-tls.md b/docs/knowledge-base/cloudflare/tunnels/full-tls.md
index 84bc2ae5..3d0a5cb9 100644
--- a/docs/knowledge-base/cloudflare/tunnels/full-tls.md
+++ b/docs/knowledge-base/cloudflare/tunnels/full-tls.md
@@ -33,11 +33,12 @@ To follow this guide, you'll need:
### Quick Links to Important Sections:
- [Create a Cloudflare Origin Certificate](#_1-create-a-cloudflare-origin-certificate)
-- [Add Origin Certificate to Your Server](#_2-add-certificate-to-your-server)
-- [Setup Encryption mode on Cloudflare](#_3-setup-encryption-mode-on-cloudflare)
-- [Configure Tunnel to Use HTTPS](#_4-configure-tunnel-to-use-https)
-- [Configure Cloudflare to Always Use HTTPS](#_5-configure-cloudflare-to-always-use-https)
-- [Update URLs from HTTP to HTTPS](#_6-update-urls-from-http-to-https)
+- [Add Origin Certificate to Your Server](#_2-add-origin-certificate-to-your-server)
+- [Configure Coolify to Use the Origin Certificate](#_3-configure-coolify-to-use-the-origin-certificate)
+- [Setup Encryption mode on Cloudflare](#_4-setup-encryption-mode-on-cloudflare)
+- [Configure Tunnel to Use HTTPS](#_5-configure-tunnel-to-use-https)
+- [Configure Cloudflare to Always Use HTTPS](#_6-configure-cloudflare-to-always-use-https)
+- [Update URLs from HTTP to HTTPS](#_7-update-urls-from-http-to-https)
---
@@ -98,58 +99,103 @@ ssh shadowarcanist@203.0.113.1
Once logged in, navigate to the Coolify proxy directory:
```sh
-$ cd /data/coolify/proxy
+cd /data/coolify/proxy
```
Check if you have a **certs** folder:
```sh
-$ ls
+ls
> acme.json docker-compose.yml dynamic
```
If there’s no **certs** folder, create it:
```sh
-$ mkdir certs
+mkdir certs
```
Verify it was created:
```sh
-$ ls
+ls
> acme.json certs docker-compose.yml dynamic
```
Now, navigate into the **certs** directory:
```sh
-$ cd certs
+cd certs
```
Create two new files for the certificate and private key:
```sh
-$ touch shadowarcanist.cert shadowarcanist.key
+touch shadowarcanist.cert shadowarcanist.key
```
Verify the files were created:
```sh
-$ ls
+ls
> shadowarcanist.cert shadowarcanist.key
```
Open the **shadowarcanist.cert** file and paste the certificate from the Cloudflare dashboard:
```sh
-$ nano shadowarcanist.cert
+nano shadowarcanist.cert
```
Save and exit after pasting the certificate.
Do the same for the **shadowarcanist.key** file and paste the private key:
```sh
-$ nano shadowarcanist.key
+nano shadowarcanist.key
```
Save and exit.
Now the origin certificate is installed on your server.
+## 3. Configure Coolify to Use the Origin Certificate
+Now, in your Coolify dashboard:
-## 3. Setup Encryption mode on Cloudflare
+
+
+1. Go to the **Server** section in the sidebar.
+2. Select **Proxy**.
+3. Open the **Dynamic Configuration** page
+4. Click **Add** button
+
+You will now be prompted to enter the Dynamic Configuration.
+
+
+
+1. Choose a name for your configuration.
+2. Enter the following details in the configuration field:
+```yaml
+tls:
+ certificates:
+ -
+ certFile: /traefik/certs/shadowarcanist.cert
+ keyFile: /traefik/certs/shadowarcanist.key
+```
+
+::: details Adding Multiple Certificates (click to view)
+
+```yaml
+tls:
+ certificates:
+ -
+ certFile: /traefik/certs/shadowarcanist.cert
+ keyFile: /traefik/certs/shadowarcanist.key
+ -
+ certFile: /traefik/certs/name2.cert
+ keyFile: /traefik/certs/name2.key
+ -
+ certFile: /traefik/certs/name3.cert
+ keyFile: /traefik/certs/name3.key
+```
+:::
+
+3. Save the configuration
+
+From now on, Coolify will use the origin certificate for requests matching the hostname.
+
+
+## 4. Setup Encryption mode on Cloudflare
To set up encryption on Cloudflare, follow these steps:
@@ -163,7 +209,7 @@ To set up encryption on Cloudflare, follow these steps:
Choose **Full (Strict)** as the encryption mode.
-## 4. Configure Tunnel to Use HTTPS
+## 5. Configure Tunnel to Use HTTPS
To configure the tunnel for HTTPS, follow these steps:
@@ -186,7 +232,7 @@ Next, update the hostnames as follows:
6. Scroll down and click the **Save Hostname** button.
-## 5. Configure Cloudflare to Always Use HTTPS
+## 6. Configure Cloudflare to Always Use HTTPS
@@ -195,7 +241,7 @@ Next, update the hostnames as follows:
3. Enable **Always Use HTTPS**.
-## 6. Update URLs from HTTP to HTTPS
+## 7. Update URLs from HTTP to HTTPS
Now, update all URLs from **HTTP** to **HTTPS** in Coolify, including resources and the instance domain on the settings page.
diff --git a/docs/public/images/knowledge-base/cf-tunnel/full-tls/11.webp b/docs/public/images/knowledge-base/cf-tunnel/full-tls/11.webp
index 127ed546..14049abf 100644
Binary files a/docs/public/images/knowledge-base/cf-tunnel/full-tls/11.webp and b/docs/public/images/knowledge-base/cf-tunnel/full-tls/11.webp differ
diff --git a/docs/public/images/knowledge-base/cf-tunnel/full-tls/12.webp b/docs/public/images/knowledge-base/cf-tunnel/full-tls/12.webp
new file mode 100644
index 00000000..f238e2c8
Binary files /dev/null and b/docs/public/images/knowledge-base/cf-tunnel/full-tls/12.webp differ
diff --git a/docs/public/images/knowledge-base/cf-tunnel/full-tls/13.webp b/docs/public/images/knowledge-base/cf-tunnel/full-tls/13.webp
new file mode 100644
index 00000000..648e1b7a
Binary files /dev/null and b/docs/public/images/knowledge-base/cf-tunnel/full-tls/13.webp differ