0.0.0.0/0 in the security group. I thought maybe I need to allow certain IPs/prefixes provided by CF so I added all the prefixes from https://www.cloudflare.com/ips/ but I still can't access gitlab. When I check the logs I am seeing 104.28.220.197 which is a cloudflare IP.