You did not share the domain so it is slightly difficult to test. However, you have a few choices.
Enable SSL Mode “Full” either at a zone level or via a page rule for each of the two hostnames.
Set the two records to
You probably have SSL Mode Flexible at the moment, and Shootproof are redirecting the request to HTTPS also. These two things combine to cause the redirect loop.
Yes I do have it on flexible at the moment. Our website has an SSL certificate already, will this cause any issues? I am not really sure what this setting does to be honest.
I just copied everything over that was in our Google DNS settings so I was definitely surprised it did not work.
For now I have changed our nameservers back to Google DNS. So I am not sure if sharing the domain at this point with it not set up will be helpful, but feel free to let me know otherwise.