Apologies @fritex , meant to get back to this sooner.
I can confirm that the SSL/TLS was set to Full (strict) last week, and that seems to be working fine for the root site at duncan.ie.
media-2p0.pages.dev is working, but not media.duncan.ie, still has the 522 error.
Might there be any other settings that might be interfering with this?
