Recommended mode: Full (Strict) — traffic is encrypted end-to-end. ⚠️ Never use Flexible if your server already has HTTPS configured — it creates an infinite redirect loop.