"Redirected too many times" and "An A, AAAA, or CNAME record with that host already exists."

I bought a new custom domain name "rython.dev" and I'm trying to change my website's existing custom domain name to the new one.

I'm unable to add a CNAME record to the DNS settings because "An A, AAAA, or CNAME record with that host already exists" even though I'm positive there isn't?
When I try to hop on "https://rython.dev" or with a "www" subdomain, it gives me an error "Redirected too many times"

ryanOP•1/9/24, 12:13 PM

I changed my files in my repository (astro.config.mjs) and I'm not sure if I should have with the content

ryanOP•1/9/24, 12:17 PM

Update: deleted A records with "www" and I'm able to add the CNAME

ryanOP•1/9/24, 12:22 PM

Issue #2 still persists

ryanOP•1/9/24, 12:40 PM

this is what happens when I run wget command

ryanOP•1/9/24, 1:29 PM

as of right now, github is experiencing issues and I believe that has affected it

ryanOP•1/9/24, 1:29 PM

(I'm using Github Pages)

Rryan this is what happens when I run wget command

Chaika•1/9/24, 1:35 PM

Under SSL/TLS -> Overview, change your SSL/TLS Mode to "Full (Strict)"

Chaika•1/9/24, 1:35 PM

Magic link: https://dash.cloudflare.com/?to=/:account/:zone/ssl-tls

CChaika Under SSL/TLS -> Overview, change your SSL/TLS Mode to "Full (Strict)"

ryanOP•1/9/24, 1:58 PM

thanks, I believe that helped

But for now, the Github Actions aren't successfully building and I suspect that it's on Github's side and not mine

Rryan thanks, I believe that helped But for now, the Github Actions aren't successful...

Chaika•1/9/24, 1:59 PM

yea Github is still dying lol https://www.githubstatus.com/incidents/pxg3dz4yg7lp

Incident with Issues, API Requests, Pull Requests, Actions, Pages, ...

ryanOP•1/9/24, 1:59 PM

haha yea

ryanOP•1/9/24, 2:00 PM

I'll continue this tomorrow

Rryan Update: deleted A records with "www" and I'm able to add the CNAME

ryanOP•1/9/24, 2:00 PM

now I understood why I couldn't create CNAME, it's not cuz of the property but because of the existing "www" A records

moohr•1/9/24, 2:00 PM

was wondering why I was seeing 500s all over the place and a merged pr just warped back in time... now it makes sense

ryanOP•1/9/24, 2:01 PM

ryanOP•1/10/24, 12:14 AM

Github Pages build and deployment were successful, now I'm not sure why this isn't working

ryanOP•1/10/24, 12:26 AM

ryanOP•1/10/24, 12:28 AM

oh wait. what

ryanOP•1/10/24, 12:31 AM

do I need to pay to solve this issue?

Cyb3r-Jak3•1/10/24, 12:34 AM

What happens if you disable proxy status for the domain? What is the SSL certificate that is shown?

CCyb3r-Jak3 What happens if you disable proxy status for the domain? What is the SSL certifi...

ryanOP•1/10/24, 12:37 AM

like this?

CChaika Under SSL/TLS -> Overview, change your SSL/TLS Mode to "Full (Strict)"

ryanOP•1/10/24, 12:37 AM

or just undo this step?

ryanOP•1/10/24, 12:38 AM

oh wait I just changed from "Full Strict" to Full and now the domain works

ryanOP•1/10/24, 12:38 AM

yay!

Rryan like this?

ryanOP•1/10/24, 12:39 AM

changed back to this

Chaika•1/10/24, 12:39 AM

Full is not secure

Chaika•1/10/24, 12:39 AM

Should only ever use Full (Strict)

ryanOP•1/10/24, 12:39 AM

Chaika•1/10/24, 12:39 AM

It should work without paying though, something else might be broken or need a sec

Cyb3r-Jak3•1/10/24, 12:40 AM

Wait I’m confused. Which domain are you trying to use? The www is the CNAME record you have but the custom GitHub domain is for the apex domain.

CCyb3r-Jak3 Wait I’m confused. Which domain are you trying to use? The www is the CNAME reco...

ryanOP•1/10/24, 12:40 AM

I'm trying to use rython.dev?

ryanOP•1/10/24, 12:42 AM

Cyb3r-Jak3•1/10/24, 12:43 AM

Then you need the CNAME for the apex to point to the GitHub one and have it configured in GitHub settings. Right now you have a custom domain in GitHub of rython.dev but a DNS record of www.rython.dev pointing to that.

CCyb3r-Jak3 Then you need the CNAME for the apex to point to the GitHub one and have it conf...

ryanOP•1/10/24, 12:44 AM

so I need to change the CNAME record?

CCyb3r-Jak3 Then you need the CNAME for the apex to point to the GitHub one and have it conf...

Chaika•1/10/24, 12:45 AM

ehh that shouldn't really matter, he's using the A records Github says you can use for apex, and has a redirect on www

ryanOP•1/10/24, 12:45 AM

after changing from Full to Full Strict, it seems like the domain continues to work?

Chaika•1/10/24, 12:45 AM

Chaika•1/10/24, 12:46 AM

Your screenshot shows that

Rryan after changing from Full to Full Strict, it seems like the domain continues to w...

Chaika•1/10/24, 12:46 AM

it doesn't for me, probably cache

ryanOP•1/10/24, 12:46 AM

okay thanks

CChaika Click to see attachment

ryanOP•1/10/24, 12:46 AM

yeah, so I figured it's only an SSL certificate error?

Chaika•1/10/24, 12:47 AM

If you switched it to a CNAME on your apex it should work though, because Cloudflare is ok if the cert matches the CNAME target

Chaika•1/10/24, 12:47 AM

otherwise it's probably because you added it when you had redirects broken, could try enabing/disabling in Github

CChaika otherwise it's probably because you added it when you had redirects broken, coul...

ryanOP•1/10/24, 12:48 AM

what should I enable/disable?

Chaika•1/10/24, 12:49 AM

Remove and readd the Custom Domain, or maybe just enforce https, it just needs to realize that it is enable to configure https now

ryanOP•1/10/24, 12:49 AM

ok, will do

Chaika•1/10/24, 12:50 AM

If it helps to explain, Github is serving the github.io certificate for your site right now, because it doesn't have one issued for it specifically

curl --resolve rython.dev:443:185.199.111.153 https://rython.dev/ -vvv -k -o /dev/null
...

ALPN: server accepted h2
Server certificate:
subject: C=US; ST=California; L=San Francisco; O=GitHub, Inc.; CN=*.github.io
start date: Feb 21 00:00:00 2023 GMT
expire date: Mar 20 23:59:59 2024 GMT
issuer: C=US; O=DigiCert Inc; CN=DigiCert TLS RSA SHA256 2020 CA1
SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
} [5 bytes data]

Chaika•1/10/24, 12:50 AM

Full Works because it accepts any certificate at all, which is why it's insecure

Chaika•1/10/24, 12:51 AM

it would be best if you could get Github to issue you an actual valid certificate for your site.

ryanOP•1/10/24, 12:52 AM

should I change the code for Github Actions to host it on a default github url? like make the website work with