From 3a1dce59f79b2f4d002ce921471b0338be0f0048 Mon Sep 17 00:00:00 2001
From: kuba86 <8183159+kuba86@users.noreply.github.com>
Date: Sat, 13 Dec 2025 17:19:32 +0100
Subject: [PATCH] Document workaround for Cloudflare proxy signature error when
 using rclone

---
 doc/book/connect/cli.md | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/doc/book/connect/cli.md b/doc/book/connect/cli.md
index 6529e4b2..8329f0be 100644
--- a/doc/book/connect/cli.md
+++ b/doc/book/connect/cli.md
@@ -149,6 +149,15 @@ rclone help
 This will tremendously accelerate operations such as `rclone sync` or `rclone ncdu` by reducing the number
 of ListObjects calls that are made.
 
+**Garage behind Cloudflare proxy:** when running Garage behind Cloudflare proxy, you might see `Response: error 403 Forbidden, Forbidden: Invalid signature` error in your garage logs or `AccessDenied: Forbidden: Invalid signature` error in rclone logs. Try adding `--s3-sign-accept-encoding=false` flag to your rclone command and see if the issue is resolved.
+
+```bash
+# this throws an error
+rclone lsd garage:
+
+# this should work
+rclone lsd --s3-sign-accept-encoding=false garage:
+```
 
 ## `s3cmd`
 
@@ -314,4 +323,3 @@ ls
 ```
 
 And through the web interface at http://[::1]:8080/web/client
-