<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Update Documentation to warn of Cloudflare Proxy issues]]></title><description><![CDATA[<ul>
<li><a href="https://docs.cloudron.io/packages/collabora/" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/packages/collabora/</a></li>
</ul>
<p dir="auto">Connecting Nextcloud to the Cloudron Collabora Online app doesn't work by default with Cloudflare Proxy enabled on the subdomain.</p>
<p dir="auto">The fix is to add Cloudflare Trusted IPs to your Cloudron &gt; Network &gt; Configure Trusted IPs &amp; Ranges, like so:</p>
<pre><code># Cloudflare IPv4 ranges
173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/13
104.24.0.0/14
172.64.0.0/13
131.0.72.0/22
# Cloudflare IPv6 ranges
2400:cb00::/32
2606:4700::/32
2803:f800::/32
2405:b500::/32
2405:8100::/32
2a06:98c0::/29
2c0f:f248::/32
</code></pre>
<p dir="auto">Source: <a href="https://www.cloudflare.com/en-gb/ips/" target="_blank" rel="noopener noreferrer nofollow ugc">https://www.cloudflare.com/en-gb/ips/</a></p>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/girish" aria-label="Profile: girish">@<bdi>girish</bdi></a> and <a class="plugin-mentions-user plugin-mentions-a" href="/user/nebulon" aria-label="Profile: nebulon">@<bdi>nebulon</bdi></a> I wonder if these IPs should be pulled and updated from the Cloudflare API when anyone uses Cloudflare DNS settings in Cloudron?</p>
<p dir="auto">Might save from much confusion potential and many support issues?</p>
]]></description><link>https://forum.cloudron.io/topic/14279/update-documentation-to-warn-of-cloudflare-proxy-issues</link><generator>RSS for Node</generator><lastBuildDate>Fri, 09 Oct 2026 01:55:38 GMT</lastBuildDate><atom:link href="https://forum.cloudron.io/topic/14279.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 05 Sep 2025 21:56:54 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to Update Documentation to warn of Cloudflare Proxy issues on Mon, 08 Sep 2025 12:14:41 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/james" aria-label="Profile: james">@<bdi>james</bdi></a> <a class="plugin-mentions-user plugin-mentions-a" href="/user/fbartels" aria-label="Profile: fbartels">@<bdi>fbartels</bdi></a> Correct, this is just for pre-populating and updating the values in Cloudron &gt; Network &gt; Configure Trusted IPs &amp; Ranges, when "Enable proxying for new DNS records" is ticked on any app.</p>
<p dir="auto">If you are using Cloudflare Proxying, you are implying you trust Cloudflare IPs to relay traffic.</p>
<p dir="auto">The Nextcloud WOPI setting, although I think it could be pre-populated, is easier to do from following the documentation, if there's any concern why you wouldn't want that internal IP address pre-populated. Although, I can't think of why you would be concerned with an internal IP address being pre-populated in Nextcloud.</p>
]]></description><link>https://forum.cloudron.io/post/112496</link><guid isPermaLink="true">https://forum.cloudron.io/post/112496</guid><dc:creator><![CDATA[marcusquinn]]></dc:creator><pubDate>Mon, 08 Sep 2025 12:14:41 GMT</pubDate></item><item><title><![CDATA[Reply to Update Documentation to warn of Cloudflare Proxy issues on Mon, 08 Sep 2025 10:21:42 GMT]]></title><description><![CDATA[<p dir="auto">Hello <a class="plugin-mentions-user plugin-mentions-a" href="/user/fbartels" aria-label="Profile: fbartels">@<bdi>fbartels</bdi></a></p>
<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/marcusquinn" aria-label="Profile: marcusquinn">@<bdi>marcusquinn</bdi></a> said in <a href="/post/112436">Update Documentation to warn of Cloudflare Proxy issues</a>:</p>
<blockquote>
<p dir="auto">The fix is to add Cloudflare Trusted IPs to your Cloudron &gt; Network &gt; Configure Trusted IPs &amp; Ranges, like so:</p>
</blockquote>
<p dir="auto">As I understood it, it is about the <a href="https://docs.cloudron.io/networking/#trusted-ips" target="_blank" rel="noopener noreferrer nofollow ugc">https://docs.cloudron.io/networking/#trusted-ips</a> configuration and not the app itself and not the WOPI setting of this specific app.<br />
This post is also more a feature request with the example working on collabora.</p>
]]></description><link>https://forum.cloudron.io/post/112485</link><guid isPermaLink="true">https://forum.cloudron.io/post/112485</guid><dc:creator><![CDATA[james]]></dc:creator><pubDate>Mon, 08 Sep 2025 10:21:42 GMT</pubDate></item><item><title><![CDATA[Reply to Update Documentation to warn of Cloudflare Proxy issues on Mon, 08 Sep 2025 10:15:07 GMT]]></title><description><![CDATA[<p dir="auto"><a class="plugin-mentions-user plugin-mentions-a" href="/user/james" aria-label="Profile: james">@<bdi>james</bdi></a> said in <a href="/post/112475">Update Documentation to warn of Cloudflare Proxy issues</a>:</p>
<blockquote>
<p dir="auto">should this be done by default when Cloudflare is used</p>
</blockquote>
<p dir="auto">Does this refer to the <code>Allow list for WOPI requests</code> setting in Nextcloud? Automatically allowing all requests that come from the Cloudflare infrastructure seems like a bad idea for me.</p>
]]></description><link>https://forum.cloudron.io/post/112484</link><guid isPermaLink="true">https://forum.cloudron.io/post/112484</guid><dc:creator><![CDATA[fbartels]]></dc:creator><pubDate>Mon, 08 Sep 2025 10:15:07 GMT</pubDate></item><item><title><![CDATA[Reply to Update Documentation to warn of Cloudflare Proxy issues on Mon, 08 Sep 2025 08:55:29 GMT]]></title><description><![CDATA[<p dir="auto">Hello <a class="plugin-mentions-user plugin-mentions-a" href="/user/marcusquinn" aria-label="Profile: marcusquinn">@<bdi>marcusquinn</bdi></a><br />
That is interesting and might be worth considering when using Cloudflare as the DNS provider.<br />
Questions I am asking myself are the following:</p>
<ul>
<li>should this be done by default when Cloudflare is used</li>
<li>should this only be done if Cloudflare is used with the <code>Enable proxying  for new DNS records</code> setting is enabled<br />
<img src="/assets/uploads/files/1757321602675-d0cd2081-f5db-4735-880b-af5357fcd982-image.png" alt="d0cd2081-f5db-4735-880b-af5357fcd982-image.png" class="img-markdown  img-fluid" width="599" height="445" /></li>
<li>how often should this list be checked for updates to prevent wrong IP addresses in the Trusted IPs setting</li>
</ul>
<p dir="auto">I like idea.</p>
]]></description><link>https://forum.cloudron.io/post/112475</link><guid isPermaLink="true">https://forum.cloudron.io/post/112475</guid><dc:creator><![CDATA[james]]></dc:creator><pubDate>Mon, 08 Sep 2025 08:55:29 GMT</pubDate></item></channel></rss>