Hello Discourser.. i just followed guide from [image] Install Discourse on a residential internet with Cloudflare Tunnel Sysadmins Since Discourse now has support for running on a Raspberry Pi, running a small instance in your home lab will become a common use case. However, many residential ISPs block incoming traffic to the ports 80/443 that Discourse need. For our demo site at https://discourse-on-a-pi.falco.dev/ we used Cloudflare Tunnel to work around this, and you can do it too! Setup your tunnel First, follow the following guide: The only change you need is changing the URL from url: http://localhost:8000 to url… i have successfully installed discourse and i put my server into cloudflare tunnel. I have a few things to ask here.. after I had a ddos attack that was so rough, I activated UAM (under attack mode) and it managed to prevent ddos attacks, but I got discourse that couldn’t run smoothly with UAM, so I wanted to block it via ip, after I saw. apparently i get only ip from same(either localhost or from tunnel itself), how do i get real ip from visitor? if anyone can answer, please provide how. sorry I’m too new here. after putting server in cloudflare tunnel… i still use Let Encrypt.. can the SSL from Let Encrypt be updated(i mean renew), or do I have to use the SSL from cloudflare itself? I haven’t had any success using SSL from cloudflare yet. there are friends here want to show how.? maybe that’s all I want to ask first for now. before that. to the kind friend who answered, I thank you very much

Let Encrypt behind Cloudflare Tunnel When you put your server behind Cloudflare Tunnel, the SSL certificate management is typically handled by Cloudflare rather than Let’s Encrypt directly. Cloudflare offers its own SSL/TLS certificates, which are managed and automatically renewed by Cloudflare. When you enable the Cloudflare DNS mode proxy (orange cloud), the traffic between the client and Cloudflare is encrypted using Cloudflare’s SSL certificate. Cloudflare handles the SSL termination and then communicates with your server over the tunnel using its own certificate. As a result, you don’t need to worry about renewing the Let’s Encrypt certificate on your server directly. Cloudflare will manage the SSL/TLS certificate for the domain and handle the renewal process automatically. It’s worth noting that when using Cloudflare’s SSL certificate, the SSL handshake between the client and Cloudflare happens at the edge server, reducing the load on your server and potentially improving performance.

[image] kuydiyadri: after I had a ddos attack that was so rough, I activated UAM (under attack mode) and it managed to prevent ddos attacks, but I got discourse that couldn’t run smoothly with UAM, so I wanted to block it via ip, after I saw. apparently i get only ip from same(either localhost or from tunnel itself), how do i get real ip from visitor? if anyone can answer, please provide how. sorry I’m too new here. You should be able to get real visitor ip, I think you would just get from a header x-real-ip, check cloudflare documentation .

@syandriz thanks.. i hope SSL Encrypt got renew like you said @ghassan i do many time to config yml, but not work. can give me step

Yes i do with and without still Nginx give me same result. Mr @pfaffman i dont know how. and may i know why iplogger(dot)org still get my real ip, do you have any advice to hide my ip from that.

Cloudflare Tunnel (Real IP) and SSL

Product Support Self-hosting

pfaffman (Jay Pfaffman) May 8, 2023, 1:51pm 5

Did you add the cloudflare template?

Topic		Replies	Views
Trying to use Let's Encrypt + Cloudflare Product Support	19	3680	February 2, 2019
Install Discourse on a residential internet with Cloudflare Tunnel Sysadmins arm , how-to , raspberry-pi , install	69	10710	July 27, 2026
Security section shows Cloudflare IP instead of user's IP Self-hosting	6	791	March 27, 2026
Need help with installing discourse Self-hosting	3	647	July 1, 2023
Cloudflare with Discourse Self-hosting	47	7064	January 8, 2020

Cloudflare Tunnel (Real IP) and SSL

Related topics