Securing site with Cloudflare

[RonRN18]

I have tried to follow all sorts of instructions from both this forum and other sources to secure my ZoneMinder server. I have a domain I was planning on assigning the server and set everything up. I now show a secured padlock when I enter my domain using "https://" before the domain when I have Cloudflare set to "Flexible", but I also am able to log in via "http://", which is not secure. I am unable to increase the setting to "Full (strict)", I believe because it is accessible via either http or https. I would like to make it so I can ONLY access my ZoneMinder via HTTPS but all attempts to do so has borked the system. In case it helps, I'm basing this on Ubuntu 20.04 server as my OS and Apache2. I built this in a VM on a XCP-ng hypervisor. I have also created an Nginx version (in a different VM) and was having even less luck. I'm hoping someone can point me in the right direction as to how to rectify my situation.

[burger]

This is outside the scope of the Zoneminder forums. Such a question is for either cloudflare, apache, or nginx forums. At a quick glance, it seems the issue is of how to properly redirect http requests (port 80) to port 443.

Typically you will have apache do a redirect on port 80 so that it goes to 443, however if you have lets encrypt you might put an exception in for the lets encrypt folders.

You should be using Apache if you are not comfortable with web servers and ZM. Apache is easier to setup / better documented.