@darkpollo said in NodeBB and Cloudflare:

Is this still an issue? I cannot find any more info in the docs and I would like to use CF with Nodebb...

We are using NodeBB on a alternative Xenforo support site.
We are also using it behind CloudFlare successfully. I had numerous issues before I realized I websockets were in use and remembered it was an option in CloudFlare.
Currently their free plan does allow the use of WebSockets, but you have to turn it on as it is off by default.

It is located under your Network tab in the CF control panel.

Using mail for 2FA is an oxymoron. Just a few steps worse than using SMS.
The most secure factors are a key (I use Yubi Keys) and then the code used by apps.
I would NOT encourage dependence on email for 2FA.
I think it is used to be an option pre XF 2.3, but it shouldn't have been and it was mentioned to them. They finally went passkeys/code via app/backup code and got rid of the email option.

Unofficial Xenforo admin support site - Xenforo Help Central.
We know it's an oxymoron to run a support site for one script on another, but there were concerns that XF would try to invalidate the license as the site does not ask (nor really care as long as you don't broadcast the fact) if you are using a licensed copy or not. And the people involved are not well-liked by Xenforo developers because of posts they made about developer actions/decisions and that support choice.
The site is more about providing help to XF admins in an area free from monetary based concerns that is usual on an official support site.