You should enable DSN over TLS, which is available in MORE SETTINGS → Custom DNS → Clouflare.

1 Like