Everything to do and verify.
BEFORE ADDING THE DOMAIN
Export or record your existing DNS zone
DURING SETUP
Review every imported record against your list Add anything missing, particularly MX, SPF, DKIM and verification records
Set proxy states: web records orange, everything else grey
BEFORE CHANGING NAMESERVERS
Confirm records are complete and correct
AFTER CHANGING NAMESERVERS
Set SSL mode to Full (strict) Enable Always Use HTTPS Disable Rocket Loader Enable Brotli Run AutoSSL in cPanel and confirm it succeeds
RULES TO CREATE
Bypass cache for admin, cart, checkout and account Challenge requests to the login path Allow payment gateway callbacks
TESTING
The site loads over https with no warning Mail sends and receives cPanel loads Checkout completes with a real low-value payment A payment callback updates the order
AFTERWARDS
Export the zone as a DNS backup Note the configuration with your site documentation
