Conversation

Because I see a thread about this again;

Reminder that proxying your fedi instance through cloudflare does not magically hide your ip address!

Resolving your domain will return the cloudflare ip, but your instance also sends out requests, and those don't go through cloudflare. Any one with an instance you federate with can find it by checking their access logs, e.g. grep 'example.com' /var/log/nginx/access.log

Also, the requests that are send to your server (including DM's and passwords) will all pass through cloudflare and be readable to them. You should consider if that's acceptable to you.

If hiding your IP is something you want (or maybe you require this to get open ports or something), you're better of using a vpn to a place/server you trust, such that all traffic goes through there. This can be a vps somewhere, or an isp who provides ip addresses this way. FFDN is a group of volnteer-based member-owned isp's, some of whom provide such a service, see https://www.ffdn.org/en/members-fdn-federation (most, if not all, are French though).