Reverse proxy for Discourse | Real IP masking

I think you fix it by having your firewall allow connections only from cloudflare servers. This way it will not matter if your ip address is known.