Whoami does not show real IPs with Real IP plugin on Traefik behind Cloudflare

Traefik Traefik v2
, ,
1

Please help me troubleshoot the config below.

Main docker-compose.yaml

include:
  - cloudflared/docker-compose.yaml
  - traefik/docker-compose.yaml
  - whoami/docker-compose.yaml

cloudflared/docker-compose.yaml

version: "3.9"
services:
  cloudflared:
    image: cloudflare/cloudflared:latest
    container_name: cloudflared
    restart: unless-stopped
    command: tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN}
    networks:
    - traefik_network
  
networks:
  traefik_network:
    external: true
    name: traefik_network

traefik/docker-compose.yaml


version: "3.9"
services:
  traefik:
    image: traefik:latest
    container_name: traefik
    restart: on-failure
    ports:
      - "8080:8080"
    secrets:
      - cf_api_key
      - cf_api_email
    environment:
      CF_API_KEY_FILE: /run/secrets/cf_api_key
      CF_API_EMAIL_FILE: /run/secrets/cf_api_email
    volumes:
      - "./data/letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./traefik.yaml:/etc/traefik/traefik.yaml"
    labels:
      - traefik.http.routers.traefik.rule=PathPrefix(`/traefik`)
      - traefik.http.services.traefik.loadbalancer.server.port=8080
      - traefik.enable=true
  
    networks:
      - traefik_network
  
networks:
  traefik_network:
    external: true
    name: traefik_network
  
secrets:
  cf_api_key:
    file: ./secrets/cf_api_key.secret
  cf_api_email:
    file: ./secrets/cf_api_email.secret

traefik/fileConfig.yaml


http:
    middlewares:
        traefik-real-ip:
            plugin:
                traefik-real-ip:
                    excludednets:
                        - 1.1.1.1/24

traefik/traefik.yaml


global:
  checknewversion: true  
  
log:
  level: DEBUG
  format: common
  filePath: /var/log/traefik/traefik.log
  
api:
  insecure: true
  
providers:
  docker:
    exposedByDefault: false
  file:
    directory: fileConfig.yaml
  
entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"
    http:
      middlewares:
        - traefik-real-ip
  
certificatesResolvers:
  cfresolver:
    acme:
      email: mail@gmail.com
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"
  
experimental:
  plugins:
    traefik-real-ip:
      moduleName: "github.com/soulbalz/traefik-real-ip"
      version: "v1.0.3"

whoami/docker-compose.yaml

version: "3.9"
services:
  whoami:
    restart: always
    image: traefik/whoami
    container_name: whoami
    labels:
      - traefik.http.routers.whoami.rule=PathPrefix(`/whoami`)
      - traefik.http.services.whoami.loadbalancer.server.port=80
      - traefik.enable=true
    networks:
      - traefik_network
  
networks:
  traefik_network:
    external: true
    name: traefik_network
2

Not sure if Traefik-Real-IP (link) is working with "cloudflared tunnel". Check the docs.

Enable and check Traefik debug log (link).