Hello, Fabulous people of HA community.
Over the period of learning and setting up HA, I got all my answers (99%), however, I am currently faced with a situation and not able to get a resolution.
My Setup:
Server 1: XCP server with
VM1 - HA CORE (192.168.1.56)
VM2 - Ubuntu server (192.168.1.62)
Server 2: Ubuntu DR server (running backup processes) (192.168.1.50)
My ISP does not provide public IP, (I am behind CGNAT and get dynamic IP from 100.x.x.x - 122.x.x.x) thus I use cloudflared tunnel to get HA exposed to internet (GOOGLE).
When I run cloudflare tunnel on server 2, HA throws up an error as
Received X-Forwarded-For header from an untrusted proxy 100.x.x.x
but runs fine if I run it from server 1, as at that time the IP HA reports are from 192.168.1.x/24 which matches my HA HTTP allowed proxy rule in configuration.yml file, as needed for proxies.
http:
use_x_forwarded_for: true
trusted_proxies: 192.168.1.0/24
The cloudflare plugin in this guide Cloudflare Addon does not work as it seems it needs public IP to be updated in Domain (zone) DNS records to point to HA.
Any suggestion why that is and how can I fix it? Kindly bear in mind I am still learning and pretty new to Linux in general.
Thank you in advance 
Edit: added link for addon