Cloudflare and Crowdsec behind Traefik

[derKlinz]

hi there, someone have this combi?

my problem is, that the audit for failed logins shows the cloudflare ip, and not the real client ip. ( so crowdsec unable to ban bruteforce )

[Nest] 6 - 04/21/2024, 4:43:09 PM WARN [AuthService] Failed login attempt for user [email protected] from ip address 172.70.246.109

i installed a traefik plugin (cloudflarewarp). Installed a whoami container and can confirm that the ip (X-Real-Ip) shows correct (in whoami).

in immich still showing the cloudflare ip.

someone has an idea how i can set up traefik / immich that the real IP is showing?