Skip to main content
Cloudflare’s proxy (the orange cloud) works fine in front of FastCat WordPress. One setting decides whether it works or not: SSL/TLS encryption mode.
Set SSL/TLS mode to Full while your domain is being set up, then switch to Full (strict) once your panel shows Live · SSL active.

​
Setup order

1

Point the record at us

Add the A record from Connect your domain, using the IP shown in your panel. The proxy can be on (orange cloud) or off.
2

Set SSL/TLS mode to Full

In Cloudflare: SSL/TLS → Overview → Full. Not Off, not Flexible, and not Full (strict) yet.
3

Let us verify and issue

Because the proxy hides your origin, we verify your domain by fetching a token from your site at /.well-known/fastcat-domain-check. Leave /.well-known/ paths unblocked by any firewall or page rule.
4

Switch to Full (strict)

Once the panel shows Live · SSL active, your origin has a valid Let’s Encrypt certificate. Move Cloudflare to Full (strict) for end-to-end verified encryption.

​
Which mode does what

Symptom of leaving SSL/TLS mode on Off: your domain never leaves Awaiting DNS setup, even though the DNS record is correct.

​
Other proxies and CDNs

The same rules apply to any proxy or CDN in front of your site:
  • The proxy’s origin must be the IP shown in your panel, reached over HTTPS.
  • Requests to /.well-known/ must reach the origin so verification and certificate issuance can complete.
  • Don’t force a plain-HTTP connection to the origin.
Stuck? Open a ticket with your domain name and we’ll look at what the edge is seeing.