Michael Felden

Good writeup! Does a Maxmind API key need to be passed as well ?

Cloudflare enterprise can make rules to bypass bot prevention with granularity. Free, pro and business can only turn it on or off. Uptime-Kuma project has the same issue. Cloudflare itself...

> well, the IP address that had > cloudflare is falsely blocking non-abusing IP address. Yes, they are. The only remedy is to go on an expensive plan or disable...

I don't think this will be done. It would expose the origin server and lose ddos protection. The compromise is to toggle "bot fighting mode" off.

Simple solution for me was to self host the project on a domain of my choosing with LB/WAF settings of my choosing. Runs well and requires very very little resources....

Moon definition is still something like IP:port:key I was unable to generate a moon with an FQDN.