# I am a Suspect on my own Discourse installs **URL:** \ **Category:** Self-hosting\ **Created:** [February 11, 2019, 2:08pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823 "2019-02-11T14:08:31Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Watercolor\_Games](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watercolor_games/32/131248_2.png) [@Watercolor\_Games](https://meta.discourse.org/u/Watercolor_Games)\ **Post date:** [February 11, 2019, 2:08pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/1 "2019-02-11T14:08:31Z")
Hey there. I’ve installed Discourse at least 3 times and looked in my admin UI. It never fails, every single time, I’ll head to “Users → Suspect” and see myself in there. Whether it’s a dev instance or not, whether it faces the Internet or not, whether it’s active or a ghost town, I’m ALWAYS a Suspect. Do I have some sort of mythical powers that cause that? I know it doesn’t inhibit user functionality to be on that list (especially for me, the admin), but I’ve always been curious and perplexed about it. So far, the only Discourse instance where I’m admin and I don’t show up as Suspect is my gamedev forum. ---
**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\ **Post date:** [February 11, 2019, 2:12pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/2 "2019-02-11T14:12:59Z")
Do you only have one account on these installs? It’s it a straight install following the standard guide, or is there a web server in front of the docker install? ---
**Author:** ![Watercolor\_Games](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watercolor_games/32/131248_2.png) [@Watercolor\_Games](https://meta.discourse.org/u/Watercolor_Games)\ **Post date:** [February 11, 2019, 2:16pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/3 "2019-02-11T14:16:09Z")
> [@Stephen](#): > > is there a web server in front of the docker install? Oh, that’ll do it. Every single instance I have is sitting behind Cloudflare if it’s internet-facing, and potentially even behind an nginx or apache2 reverse proxy depending on what I feel like fighting with and if I’m running other sites on the same box. ---
**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\ **Post date:** [February 11, 2019, 2:18pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/4 "2019-02-11T14:18:02Z")
So you’re double-proxying discourse? Are you configuring nginx or apache to forward real client IPs to the install? Are you using the Cloudflare template? ---
**Author:** ![Watercolor\_Games](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watercolor_games/32/131248_2.png) [@Watercolor\_Games](https://meta.discourse.org/u/Watercolor_Games)\ **Post date:** [February 11, 2019, 2:19pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/5 "2019-02-11T14:19:11Z")
Forwarding real IPs, yep. Using the Cloudflare template, nope. Don’t remember how to, lol. ---
**Author:** ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)\ **Post date:** [February 11, 2019, 2:19pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/6 "2019-02-11T14:19:46Z")
Look in `/var/discourse/templates` and reference the correct file in the `app.yml` ---
**Author:** ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)\ **Post date:** [February 11, 2019, 2:33pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/7 "2019-02-11T14:33:07Z")
Suspect users has nothing to do with IP. They list users with a bio but with no read time nor posts. 95% of the case, they’re spammers. > ---
**Author:** ![Watercolor\_Games](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/watercolor_games/32/131248_2.png) [@Watercolor\_Games](https://meta.discourse.org/u/Watercolor_Games)\ **Post date:** [February 11, 2019, 2:35pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/8 "2019-02-11T14:35:47Z")
Ahhh, so it thinks I’m a spammer? lol. I haven’t read a single post on the dev instance I first noticed this on. I’m currently rebuilding it with the cloudflare template just in case I _do_ need that, even though it’s not part of the problem. Just freaked me out a little, that’s all. ---
**Author:** ![zogstrip](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/zogstrip/32/512781_2.png) [@zogstrip](https://meta.discourse.org/u/zogstrip)\ **Post date:** [February 11, 2019, 2:37pm UTC](https://meta.discourse.org/t/i-am-a-suspect-on-my-own-discourse-installs/108823/9 "2019-02-11T14:37:00Z")