How is your SSL configured at cloudflare side? are you using cloudflare performance optimization on discourse?
You should really be running cloudflare SSL in full mode not flexible
If you have cloudflare performance optimization enabled on discourse, disable it by creating a page rule.
If that doesn’t help, share your discourse domain