Is there a reason for it to be remote_ip? In loadbalancer/proxy setup it states LB ip instead of end user. Client_ip is validated by caddy - i.e. cloudflare x-connecting-ip.