Confessing a Sin - GitHub HTTPS not rendering

Mixed Content: The page at ‘’ was loaded over HTTPS, but requested an insecure stylesheet ‘’. This request has been blocked; the content must be served over HTTPS.

I’ve tried to set the Cloudflare SSH settings to flexible and the config.toml to

baseurl = “/”

Content CNAME:

How can I resolve this problem?
Source Repo

First, your baseURL should be

Second, this appears to be a hosting configuration problem, not a Hugo problem.

This link on your home page:

Brings me to: 

I would double check your Cloudflare configuration, or reach out to their support team.

1 Like

Yeah, and don’t try to appease the http-occurences, but fix them. That is better than hacking the error messages away. The easiest way should be (if it all is on YOUR host/domain) to set the “always SSL” on cloudflare to on.

thanks for the confirmation! And yes, it’s always better to get at the root of a problem then to compensate it somewhere else. Let me try a few things with Cloudflare (it’s amazing how fast their DNS update runs).

thanks! I have read on a few places that only ‘/’ is enough for the baseURL.
What is the guide line for that ?

I’ll try to solve the problem, I think it’s something to do with the rules at Cloudflare. Thanks!

With the help of Cloudflare support; set SSL to full,

then set Always Use HTTPS to on (tip it’s under SSL/TLS → Edge Certificates)

And now my GoHugo site is hosted at GitHub Pages and the DNS is managed by Cloudflare.
Thanks davidsneighbour and jmooring for the quick help.