Dashboard › byk.github.io › GitHub Pages can't issue HTTPS cert whi…

GitHub Pages can't issue HTTPS cert while DNS proxied through Cloudflare

Category: gotcha
Confidence: 1.00
ID: 019f84dc-356c-7a41-9ba7-e812f156ae0b
Project ID: 27022d30-10a9-49e4-8a75-dae8ea101609
Cross-project: No
Recalled in other projects: 1
Source session: 1H6zthdbm2YTrMQ2H
Created: 2026-07-21 13:27:31
Updated: 2026-07-21 13:27:31

Cross-Project Recalls

ProjectHitsLast recalled
opencode-lore 1 2026-08-05

Content

byk.im social-preview crawlers got broken OG previews on no-slash URLs because GitHub Pages couldn't provision a Let's Encrypt cert for the custom domain while Cloudflare's DNS proxy (orange cloud) was active — GitHub saw Cloudflare's IPs, not the real origin, and refused cert issuance. Without HTTPS enforced, GitHub's trailing-slash redirect emitted http://, and crawlers won't follow an HTTPS→HTTP downgrade. Fix sequence: un-proxy DNS (grey cloud) → GitHub issues cert → enable 'Enforce HTTPS' in GitHub Pages settings → set Cloudflare SSL/TLS mode to Full (strict) → re-enable proxy → delete the buggy Page Rule [[019f84af-f1a2-7194-97cd-17c1c9512f37]]. Repo-side defense-in-depth: canonical <link> tag in SeoHead.astro [[019f84af-f1ca-7f8f-b217-f1f81b2ba460]].

Move to: