homestead_faq's profileBrand User

666 Messages


44.4K Points

Thu, Jul 18, 2019 11:14 PM

Cloudflare: Common Cloudflare Issues

If you have gone through the instructions and your site still isn't secure or your email isn't working, here are a couple of common reasons:

  1. The DNS is not correct. (Step 6)

    In step 6, it has you compare the DNS in your Homestead account and Cloudflare. If this step was missed, feel free to take a screenshot of the DNS page in Cloudflare and post it here. We will check that the DNS is correct. 

    If email is not working, make sure the email records are correct in the Cloudflare DNS page. They are suppose to match these records:DNS settings for Homestead email.

                            A RECORDS

    Host         yourdomain           Points to

    mx            yourdomain   
    mx            yourdomain   
    mx            yourdomain   
    pop           yourdomain   
    imap         yourdomain   
    smtp         yourdomain   
    mail          yourdomain   
    webmail    yourdomain  
    email        yourdomain   

    Host Type          Points to                     Priority

    @                       mx.yourdomain            10 

    TXT Record

    Host Type    Value

    @                 v=spf1 ip4: ip4: ip4: ?all

    Correct anything that doesn't match. 

  2. Turn the Clouds on next to the DNS for your domain name and for www. (the clouds should be orange)

  3. The nameservers were not updated properly. (Step 8)

    Log into your Homestead account and click the domains tab on the left. Under the domain you are working on, click Edit your nameservers. You will need to click delete next to and then change the other 2 nameservers to the ones provided by Cloudflare. You can't change and delete in the same step, so you will need to click edit twice.

  4. You need to set the SSL to Flexible. (Step 10)

    The first part is now completed. Now, please review the Domain Summary and confirm that the SSL shows Flexible. If it does not, click the SSL option, and select Flexible. 
    (Note: you can also click Crypto at the top, then select Flexible with the drop-down menu on the right. This should save automatically after you select Flexible)

  5. It is set up, but you are just checking, not (Step 11)

    Over the next 24 hours, periodically visit When you see your site load with HTTPS, please proceed to the next step.

    Try adding the https:// before your domain and see if it shows as secure. 

  6. You haven't gone back after 24 hours to finish step 12 and 13

    Click on the Crypto button at the top.

    In the top section you should now see the status as Active Certificate. On the right side of that section, make sure it shows flexible. You now need to tell all http requests to forward to https. Scroll to the middle of this long page and look for the section entitled "Always use HTTPS" Turn it on. Also scroll to the bottom and find "Automatic HTTPS Rewrites" Turn it on

  7. You have only followed the 6 steps from the email you were sent. There are more instructions if you go to the link from the email:

    **If you have done all of the above, and your site is displaying https:// but isn't "fully secure", common issues include:

  8. Republish your site. This will often times fix that error.

  9. Elements on your site are not secure. Common elements include: 
               hitcounters (these need to be removed, they generally aren't used on sites these days and aren't secure)
               HTML elements- you'll need to open the HTML boxes and edit the code to reflect https. 
    Then republish your site


19 Messages


604 Points

9 m ago

Hello, I wanted to check that the DNS is correct for my site.  Its been online for years and was secure, but now not secure.  Trying to figure out the issue and thought you could help. Was directed to this post and to call for help on set-up. With my schedule it may be hard to call until next week, but would like the site up as soon as possible.  I've added photos of my cloudfare DNS records for review. Appreciate any assistance. Thank you,
Brand User

6.4K Messages


94.8K Points

9 m ago

If the site is at Homestead the A records need to be adjusted, remove these and alter the last one to point to 

Also remove these extra records. 

The end should look like this, with your records displaying for * and www.