Hashnode custom domain behind Cloudflare

My first post on here obviously has to be about setting it up to work with Cloudflare. The official Hashnode recommendation (read Vercel) is to disable the orange cloud, which is something I never want to do. I rely on Cloudflare heavily for security...