My users are getting a 403 error when uploading attachments to Zammad using Cloudflare R2. Looking at the requests log, I see a POST /api/v1/upload_caches/UUID request going out, but peculiarly the source IP logged on Cloudflare appears to be coming from my own IP address, not the Zammad instance’s.
Is there a way to force uploads to be mediated through Zammad so that I can narrow my firewall rules to only allow the Zammad instances to access my Cloudflare R2?
Infos:
- Used Zammad version: 6.4.1
- Used Zammad installation type: Docker Compose
- Operating system: Ubuntu 24.04
- Browser + version: Firefox 133.0.3