How to fix all traffic showing as coming from Cloudflare servers instead of the user's browser IP

Almost certainly.

Is the IP you’re seeing teh 1panel container IP?