Questions regarding SSL/TLS

Traefik Traefik v3 (latest)
1

I am just setting up my domain on cloudflare and needed to clear off certain doubts. For info, I use traefik for reverse proxy and certbot for generating the ssl certificate.

  1. In SSL/TLS -> Overview -> SSL/TLS encryption mode , which one should i select between Flexible , Full & Full (strict) ?
  2. I have already setup traefik to do HTTP->HTTPS redirection & set HTTPS as default. So in SSL/TLS -> Edge Certificates , should i enable Automatic HTTPS Rewrites & Always Use HTTPS or keep both of them off ? Here's the are the relevant SSL/TLS options i am using in traefik v3 to better guide me with the suitable cloudflare settings.
    - --entrypoints.web.address=:80
    - --entrypoints.web.http.redirections.entrypoint.to=websecure
    - --entrypoints.web.http.redirections.entrypoint.scheme=https
    - --entrypoints.web.http.redirections.entrypoint.permanent=true
    - --entrypoints.websecure.address=:443
    - --entrypoints.websecure.asDefault=true
    - --entrypoints.websecure.http.tls=true
2

Sounds more like Cloudflare questions than Traefik questions. Not sure you get them answered here.