Cloudflare settings, fix 525 and client IP behind Cloudflare

Adds a Cloudflare setting, fixes a 525 TLS error, and trusts `CF-Connecting-IP` only from Cloudflare networks.