Optimize Cloudflare Security Settings

My site already runs through Cloudflare and basic protection is in place, yet I know the platform can do much more for security. I want a seasoned Cloudflare specialist to go through my current setup, tighten every loose end, and leave me with a hardened configuration I can trust.

Scope of work
• Firewall rules – Review what I have, remove redundancies, and add precise allow/deny rules and rate limits that match real-world traffic patterns without blocking legitimate users.
• SSL/TLS – Move the zone to the most secure Full (Strict) mode, renew or generate any required origin certificates, enforce HSTS and secure ciphers, and confirm end-to-end encryption is flawless.
• Bot management – Configure Bot Fight Mode and related features so genuine traffic flows while common scrapers and automated attacks are stopped, with clear analytics I can monitor.

Acceptance criteria
1. No mixed-content or certificate errors after deployment.
2. Firewall events and bot logs show reduced malicious hits over a 48-hour test window.
3. Page response time remains equal to or better than current baselines.

Provide a concise change log of every setting you touch along with an export of the new ruleset so that I can re-import if ever needed.