SSSiteSignal Express

Cloudflare 521 with Nginx Proxy Manager

A short checklist for a Cloudflare 521 error when a hostname is routed through Nginx Proxy Manager.

First checks

  • Confirm the VPS and the target app or container are running before changing Cloudflare settings.
  • Check that ports 80 and 443 are reachable from outside the server and not blocked by the host firewall.
  • Verify the Nginx Proxy Manager proxy host forwards to the correct internal hostname and port.
  • If Cloudflare proxy is enabled, confirm the origin allows Cloudflare traffic or temporarily test DNS-only mode.

Free helper

Pick the observed Cloudflare error and TLS mode to get a focused troubleshooting path.

Open troubleshooter

Paid pack

Get the private Cloudflare/Nginx launch checklist and rollback notes for future deployments.

Buy Cloudflare pack - 1.00 EUR

View sample first

Operational checklist only. Confirm hosting, firewall, DNS, and Cloudflare settings in your own provider dashboards. Short checkout: https://buy.signal-shelf.com/cloudflare.