You need to use templates/cloudflare.template.yml in your app.yml or all of your access looks to Discourse like it’s coming from the Cloudflare IP addresses. If you block them, you’ll block all users using that same cloudflare server.
See also Discourse AI - Spam detection