tried all this. plus eliminated cloudflare. works on another server, but that kinda defeats the purpose of verifying against my own domain.