Vercel + CloudFlare Proxy

SSL/TLS on Full or Full (Strict)

“Always Use HTTPS” off and HSTS disabled

Page Rule disabling SSL on domain.com/.well-known