# Using Discourse with Cloudflare: Best Practices

**URL:** <https://meta.discourse.org/t/using-discourse-with-cloudflare-best-practices/293405>\
**Category:** Self-Hosting\
**Tags:** how-to, cloudflare\
**Created:** [January 30, 2024, 2:56am UTC](https://meta.discourse.org/t/using-discourse-with-cloudflare-best-practices/293405 "2024-01-30T02:56:10Z")\
**Posts on this page:** 1\
**Showing post:** 14

<div class="post-metadata">

**Author:** ![stance455](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stance455/32/255345_2.png) [@stance455](https://meta.discourse.org/u/stance455)\
**Post date:** [November 8, 2024, 10:15am UTC](https://meta.discourse.org/t/using-discourse-with-cloudflare-best-practices/293405/14 "2024-11-08T10:15:41Z")

</div>

Just to add to this, seems the OneBox functionality is being blocked when Super Bot Fight Mode is on and the setting Definitely automated is set to Managed or block..

You can get around this by setting up a custom WAF rule for the Onebox user agent but perhaps there is a more secure way of doing this?

---

_[View the full topic](https://meta.discourse.org/t/using-discourse-with-cloudflare-best-practices/293405)._