DNS
A record that is proxied
(Where xx.xx.xx.xx is the IP address of your server)
Encryption mode should be "Full"
Releases / WAF
Because MDOQ will put the site into maintenance mode, which causes a 503, Cloudflare can wrongly assume that MDOQ is malicious and block it. This stops releases going through.
You will see an error similar to:
403 Forbidden ... Unable to receive desired status code (200) when requesting ...
To resolve this, under the WAF setting for your domain, add the outgoing IP of your server.
You can find the outgoing IP by running `curl checkip.amazonaws.com`
You then need to configure a rule like:
(where 1.1.1.1 is the outgoing IP)
Bot Fight Mode: Must be disabled, during releases.