Cloudflare and SSL with camera ingest
Use Ruby ANPR behind Cloudflare with HTTPS Hikvision camera uploads, plus DNS and redirect troubleshooting guidance.
Ruby ANPR can operate behind Cloudflare while compatible Hikvision cameras send events to the public HTTPS hostname. The key requirement is that the camera can reach the hostname on port 443 and the request reaches ingest.php.
Recommended validation
A 401 response is useful here: it proves DNS, TLS, the web server, PHP and the ingest route are all working. The invalid key is rejected only after the request reaches Ruby ANPR.
If a camera cannot connect
Temporarily using a DNS-only record is a useful troubleshooting step because it removes the proxy layer from the path. After DNS changes, rebooting the camera can force a fresh DNS lookup.
Avoid redirect traps
Some older firmware may need HTTP port 80. If that legacy fallback is used, make sure a hosting-panel Force HTTPS rule does not redirect /ingest.php before the application can receive the POST.