Set up some forwarding rules in Cloudflare to always to go the HTTPS and of course the cert. Please do not do that. That doesn't solve the problem at all if th

Set up some forwarding rules in Cloudflare to always to go the HTTPS and of course the cert. Please do not do that. That doesn't solve the problem at all if the origin server is still serving the content over HTTP. You're just lying to visitors by making them think it's secure when it's really not. Magento is like any other PHP app.. there's Apache (or some other webserver) in front of it.. so just setup Apache properly.