How to Set Up a Wildcard Subdomain DNS Record in Cloudflare - Troubleshooting Cloudflare 522: Origin Server Checks-Nginx Upstream Connection Refused: Cloudflare Fix Guide
Final checklist
- Confirm that the same symptom is gone after a restart or refresh.
- Keep the smallest working change and undo temporary diagnostic settings.