Yes. You do need the cloudflare template. Without it, all traffic will appear to come from cloudflare’s servers rather than the user’s browser IP.
I don’t see it mentioned in the OP, which seems like a glaring omission. How did you infer that you needed it?