Cloudflare

Configuration
1

I followed this tutorial and installed Cloudflare: Easy & Free Remote Access For Home Assistant! (using a domain that I own)

However when I visit my URL I get.

It appears you don’t have

permission to access this page.

403 Error. Forbidden.

There must be something left in my config that is clashing with it. I used to have LetsEncrypt and DuckDNS insalled but I uninstalled these to replace with Cloudflare.

Blockquote
[23:42:05] INFO: Creating DNS entry mysite.com…
2022-12-08T10:42:07Z INF Added CNAME mysite.com which will route to this tunnel tunnelID=1742e5ad-e379-4905-ad02-e1c35615934e
[23:42:07] INFO: Finished setting up the Cloudflare Tunnel
s6-rc: info: service init-cloudflared-config successfully started
s6-rc: info: service cloudflared: starting
s6-rc: info: service cloudflared successfully started
s6-rc: info: service legacy-services: starting
s6-rc: info: service legacy-services successfully started
[23:42:07] INFO: Connecting Cloudflare Tunnel…
2022-12-08T10:42:07Z INF Starting tunnel tunnelID=1742e5ad-e379-4905-ad02-e1c35615934e
2022-12-08T10:42:07Z INF Version 2022.11.1
2022-12-08T10:42:07Z INF GOOS: linux, GOVersion: go1.19.3, GoArch: amd64
2022-12-08T10:42:07Z INF Settings: map[config:/tmp/config.json cred-file:/data/tunnel.json credentials-file:/data/tunnel.json loglevel:info metrics:0.0.0.0:36500 no-autoupdate:true origincert:/data/cert.pem]
2022-12-08T10:42:07Z INF Generated Connector ID: 913cfeb3-2007-4bfe-b380-19d07409d9ef
2022-12-08T10:42:07Z INF Initial protocol quic
2022-12-08T10:42:07Z INF ICMP proxy will use 172.30.33.0 as source for IPv4
2022-12-08T10:42:07Z INF ICMP proxy will use :: as source for IPv6
2022-12-08T10:42:07Z WRN The user running cloudflared process has a GID (group ID) that is not within ping_group_range. You might need to add that user to a group within that range, or instead update the range to encompass a group the user is already in by modifying /proc/sys/net/ipv4/ping_group_range. Otherwise cloudflared will not be able to ping this network error=“Group ID 0 is not between ping group 1 to 0”
2022-12-08T10:42:07Z WRN ICMP proxy feature is disabled error=“cannot create ICMPv4 proxy: Group ID 0 is not between ping group 1 to 0 nor ICMPv6 proxy: socket: permission denied”
2022-12-08T10:42:07Z INF Starting metrics server on [::]:36500/metrics
2022/12/08 23:42:07 failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 2048 kiB, got: 416 kiB). See UDP Receive Buffer Size · quic-go/quic-go Wiki · GitHub for details.
2022-12-08T10:42:08Z INF Connection c9d96c67-5a1d-4e4e-9de1-c25c2d77520d registered with protocol: quic connIndex=0 ip=198.41.200.113 location=AKL
2022-12-08T10:42:10Z INF Connection 0eb3de59-4f49-4238-8814-2c7e42444424 registered with protocol: quic connIndex=1 ip=198.41.192.37 location=MEL
2022-12-08T10:42:10Z INF Connection 82aaf7c9-e4b2-428c-88e2-0c6704383e74 registered with protocol: quic connIndex=2 ip=198.41.200.73 location=AKL
2022-12-08T10:42:11Z INF Connection d72131da-4c19-4fd8-8607-5f8f79854e7a registered with protocol: quic connIndex=3 ip=198.41.192.57 location=MEL

ip_ban_enabled is set to false and there is no ip_ban file

2

I am now getting

image
image955×525 21.6 KB

Forum posts suggest that it has to do with the proxies but I have added

  use_x_forwarded_for: true
  trusted_proxies:
    - 172.30.33.0/24
3

Things were very broken so I did a fresh install

4

i have the same ?? how to fix >

5

Hi, I had to to do a reinstall. And then once done it tool a while for it to work.

This said I am now thinking of not using the HASS integration but rather doing something like: https://www.youtube.com/watch?v=eojWaJQvqiw as this will enable me to manage SSL for all my services.