SSR Auth + CloudFlare

I'm having problems with SSR auth, and Cloudflare proxy. I've tried https://discord.com/channels/564160730845151244/1109402256949903411 and added a list of ips. 127.0.0.1, 100.100.100.100, Only client side goes trough. If i disable proxy on CloudFlare everything works fine. I have nginx proxy manager locally on the server to get ssl and proxy to the domain. Any ideas?

@D5

127.0.0.1 is local proxy, and 100.100.100.100 is the public ip of the server, just in case

you can try it out on https://bash.lv/

Seems i have found my error. I was blocking user agents I have a significant list there. One of them was apparently on the server side.

And bot fight mode does block as well, just in case someone wants to know

i've removed the entries from docker-compose.yml as they seem to not matter in my case(works perfectly fine with out them) --entryPoints.appwrite_web.forwardedHeaders.trustedIPs=127.0.0.1, 100.100.100.100 --entryPoints.appwrite_websecure.forwardedHeaders.trustedIPs=127.0.0.1, 100.100.100.100

Will make hit rate limit

You will need to add anyways in your docker compose file, under traefik section those 2 lines:

  --entryPoints.appwrite_web.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,0,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22

  --entryPoints.appwrite_websecure.forwardedHeaders.trustedIPs=173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.996.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22

roger that, will do, thank you man

hmm after adding again won't work

why do ranges differ?

Did you have run the docker compose command to rebuild containers?

yeah ofc

Also are you getting real IP addresses from users or Cloudflare?

In the Appwrite dashboard, for example, Auth

let me check

appwrite isn't working now lol

Is it showing any errors?

where did you get those ranges?

https://www.cloudflare.com/en-gb/ips/

i see other ips

oh ok same ranges, but in different order

Yes

They have updated the order