{"id":"cloudflare-dns-only-for-caddy-acme","text":"When using Caddy for automatic TLS via Let's Encrypt, Cloudflare DNS must be set to DNS-only mode (not proxied) so Caddy can perform its own ACME HTTP-01 challenge on port 80.","truth_value":"IN","source":"entries/2026/05/11/deployments-stargate.md","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudflare-dns-only-for-caddy-acme","truth_value":"IN","reason":"premise"}]}}