very strange.
the only other thing I can suggest is to follow this guide to set up cloudflare:
and then use their tools to force https and set the dns mode to “full” (not “full (strict)”) to use their certificate setup, which seems to work quite well