issues with cloudflare

[deanfourie1]

Support guidelines

• I've read the support guidelines

I've found a bug and checked that ...

• ... the documentation does not mention anything about my problem
• ... there are no open or closed issues that are related to my problem
• ... it's definitely a Firefly III issue, not me

Description

Hi im trying to deploy this with cloudflare, for remote use.

However, when accessing the webapp on mobile via the cloudflare link, the menus do not work?
I know this may not be directly a firefly related issue, but I would love some help resolving why this could be hapening?

Thanks

Debug information

Debug information generated at 2024-03-23 09:47:02 for Firefly III version v6.1.12.

System information
Item	Value
Firefly III	6.1.12 / v2.0.12 / 23 (exp. 23)
PHP version	8.3.4 (64bits) / apache2handler / Linux x86_64
BCscale	12
Error reporting	Display: Off, reporting: ALL errors
Max upload	67108864 (64 MB)
Database drivers	*mysql*, pgsql, sqlite,
Docker build	#1037, base #82

Firefly III information
Item	Value
Timezone	Europe/Amsterdam + [BrowserTZ]
App environment	production, debug: false
Layout	v1
Logging	notice, stack / (empty)
Cache driver	file
Default language and locale	en_US + equal
Trusted proxies
Login provider & user guard	eloquent / web
Login headers	N/A + N/A
Stateful domains
Last cron job	never (never)
Mailer	log

User-specific information
Item	Value
User	#1 of 1
User flags
Session start	2024-03-01 00:00:00
Session end	2024-03-31 23:59:59
View range	1M
User language	en_US
User locale	en_US
Locale(s) supported	en_US.utf8: ✅ en_US.UTF-8: ✅
User agent	Mozilla/5.0 (iPhone; CPU iPhone OS 17_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1

Expected behaviour

menus to work as they do when accessing the webpage locally.

Steps to reproduce

1. Install as per the instruction
2. setup cloudflared tunnel and route the application via http://localhost in cloudflare settings
3. access the url at myapp.mydomain.com and attempt to use the + menu and the main menu, they do nothing.

Additional info

_No response_no

[JC5]

I bet you need to set TRUSTED_PROXIES=* and then it works :)

[JC5]

Yes.

[deanfourie1]

Thanks, does this app support weekly budgeting?

[deanfourie1]

Sorry, but setting

# TRUSTED_PROXIES is a useful variable when using Docker and/or a reverse proxy.
# Set it to ** and reverse proxies work just fine.
TRUSTED_PROXIES=**

Did not work for me, I also tried with 1 *, still no go.

Any idea?

[deanfourie1]

From the browser logs.

login:1 Refused to load the script 'https://domain.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js' because it violates the following Content Security Policy directive: "script-src 'unsafe-eval' 'strict-dynamic' 'nonce-UVt/bZyvPcs/rbWpMTf6Hg=='". Note that 'script-src-elem' was not explicitly set, so 'script-src' is used as a fallback.

[JC5]

Those scripts are added by Cloudflare, not by me. And they wouldn't stop the other scripts from loading. Are there any other errors?

[deanfourie1]

FYI - I solved this by creating a custom page rule that disables the rocket-loader in CF dashboard.

Thanks for the help

[teishahbc]

Same issue for me and it helps. Thank you！

[deanfourie1]

Ok so i've almost got it working, the only thing that still doesnt work is it does not like the anchors?

Everytime I click somewhere that has the #, it just reloads the page, also it does not load any of the transaction pages. Such as a new expense.

[deanfourie1]

Preview of the problem.

Recording.2024-03-25.090735.mp4

[JC5]

What errors do you see in the browser console?

[fedor-git]

I’m experiencing an issue with Firefly III, and I’ve enabled debug mode to gather more information. However, most of the logs haven’t provided useful insights into the problem, except for one specific log entry.

The only significant entry in the debug logs is:

prod.DEBUG: Error "Illuminate\Session\TokenMismatchException" has no Firefly III treatment, parent will handle.

[sidhantunnithan]

I am facing this same issue. Disabling rocket loader fixed some issues as OP said, but the new transaction option is still broken behind CF Tunnel. Is there any solution for this as of May 2025?

[sidhantunnithan]

I have found the solution for this. Initially, I had added a page rule under Rules > Page Rules.

Instead I had to add it under Rules > Overview > Create Rule > Create Configuration Rule and add a wildcard on URI Full like so : https://firefly.<domain>.com/* and turn off Rocket Loader for this rule