Please follow this guide
If you use CloudFlare full mode, you need minimally a self-signed cert (recommended).