quick question, hopefully someone has run into this one before....using lucee / nginx / ubuntu, blocking access to the lucee admin by ip address in lucee.conf, we just started using Cloudflare and now we are blocked from the admin because the ip address is the Cloudflare IP and our actual IP is in the header X-Forwarded, anybody run into this and know how to use the header as the variable in the block?

I'm on Apache2, but it should be very similar for nginx. You'll want to configure nginx to restore the original IP address from the CF-Connecting-IP header using the ngx_http_realip_module. Ensure the module is included, then add the configuration the the relevant server block:

http {
    # ... other configurations ...

    # Set the header from which NGINX should read the real IP
    set_real_ip_from 103.21.244.0/22;
    set_real_ip_from 103.22.200.0/22;
    set_real_ip_from 103.31.4.0/22;
    set_real_ip_from 104.16.0.0/13;
    set_real_ip_from 104.24.0.0/14;
    set_real_ip_from 108.162.192.0/18;
    set_real_ip_from 131.0.72.0/22;
    set_real_ip_from 141.101.64.0/18;
    set_real_ip_from 162.158.0.0/15;
    set_real_ip_from 172.64.0.0/13;
    set_real_ip_from 173.245.48.0/20;
    set_real_ip_from 188.114.96.0/20;
    set_real_ip_from 190.93.240.0/20;
    set_real_ip_from 192.168.0.0/16;
    set_real_ip_from 197.234.240.0/22;
    set_real_ip_from 198.41.128.0/17;
    set_real_ip_from 2400:cb00::/32;
    set_real_ip_from 2405:8100::/32;
    set_real_ip_from 2405:b500::/32;
    set_real_ip_from 2606:4700::/32;
    set_real_ip_from 2803:f800::/32;
    set_real_ip_from 2a06:98c0::/29;
    set_real_ip_from 2c0f:f248::/32;

    # Specify the header field to use for the real IP
    real_ip_header CF-Connecting-IP;

    # ... other configurations ...
}

server {
    # ... server configuration ...
}

You should check https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6 regularly from time to time. I haven't actually checked if this config is working as I don't currently run nginx, but it should be sufficient to get you started.