diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 8a1d2cc..7eddfa3 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -124,12 +124,7 @@ jobs:
     - name: Check links
       uses: lycheeverse/lychee-action@2b973e86fc7b1f6b36a93795fe2c9c6ae1118621  # v1.10.0
       with:
-        args: -n
-              --exclude https://glotzerlab.engin.umich.edu
-              --exclude 'https://github.com/glotzerlab/row/edit.*'
-              --exclude doi.org
-              './**/*.md'
-              './**/*.html'
+        args: -n .
         fail: true
 
   check_licenses:
diff --git a/ContributorAgreement.md b/ContributorAgreement.md
index 7b5e0e1..fd2b0ba 100644
--- a/ContributorAgreement.md
+++ b/ContributorAgreement.md
@@ -25,4 +25,4 @@ you are authorized to sign this contract on behalf of your company (if identifie
 
 Based on the Sun Contributor Agreement - version 1.5.
 This document is licensed under a Creative Commons Attribution-Share Alike 3.0 Unported License
-http://creativecommons.org/licenses/by-sa/3.0/
+https://creativecommons.org/licenses/by-sa/3.0/
diff --git a/doc/src/developers/contributing.md b/doc/src/developers/contributing.md
index 10cff3c..b82b162 100644
--- a/doc/src/developers/contributing.md
+++ b/doc/src/developers/contributing.md
@@ -43,7 +43,7 @@ Git identifies every commit you make with your name and e-mail. [Set your identi
 to correctly identify your work and set it *identically on all systems* and accounts
 where you make commits.
 
-[id]: http://www.git-scm.com/book/en/v2/Getting-Started-First-Time-Git-Setup
+[id]: https://www.git-scm.com/book/en/v2/Getting-Started-First-Time-Git-Setup
 
 ## Source code
 
diff --git a/lychee.toml b/lychee.toml
new file mode 100644
index 0000000..85b25da
--- /dev/null
+++ b/lychee.toml
@@ -0,0 +1,8 @@
+require_https = true
+exclude = [
+  'https://github.com/glotzerlab/row'
+]
+
+# Many of the OnDemand services report 500 when lychee attempts to connect.
+# Many sites use cloudflare to prevent bot access. These URLs return 403.
+accept = ["200", "429", "500", "403"]