Can not log in anymore

Hi,
I can not log in to my Matomo installtion anymore. I receive this error message:

Fehler : Sicherheitschecks fehlgeschlagen. Bitte laden Sie das Formular erneut und prüfen Sie, ob Ihr Browser Cookies zulässt. Wenn Sie einen Proxy Server verwenden, müssen Sie Matomo so einrichten, dass es Proxy Header akzeptiert.”

I tried Cloudflare a few weeks ago, adopted the configuration. Matomo worked. As I was not satisfied with Cloudflare I changed back and reverted the config.

After that my login was not possible anymore from my mobile phone. After my last browser sweep (cookies, cache, etc. deleted) I can not log in from my desktop neither.

Below is the content of my config.ini.php, except the databse section.
In my global.ini.php all proxy_ settings are commented out.

I have no clue why or what caused this. Any ideas?

Thanks, Martin

[General]
force_ssl = 1
salt = “deleted”
trusted_hosts[] = “www.bahn-zum-berg.at”
trusted_hosts[] = “.bahn-zum-berg.at"
cors_domains[] = "
.bahn-zum-berg.at”

[Plugins]
Plugins[] = “CorePluginsAdmin”
Plugins[] = “CoreAdminHome”
Plugins[] = “CoreHome”
Plugins[] = “WebsiteMeasurable”
Plugins[] = “IntranetMeasurable”
Plugins[] = “Diagnostics”
Plugins[] = “CoreVisualizations”
Plugins[] = “Proxy”
Plugins[] = “API”
Plugins[] = “ExamplePlugin”
Plugins[] = “Widgetize”
Plugins[] = “Transitions”
Plugins[] = “LanguagesManager”
Plugins[] = “Actions”
Plugins[] = “Dashboard”
Plugins[] = “MultiSites”
Plugins[] = “Referrers”
Plugins[] = “UserLanguage”
Plugins[] = “DevicesDetection”
Plugins[] = “Goals”
Plugins[] = “Ecommerce”
Plugins[] = “SEO”
Plugins[] = “Events”
Plugins[] = “UserCountry”
Plugins[] = “GeoIp2”
Plugins[] = “VisitsSummary”
Plugins[] = “VisitFrequency”
Plugins[] = “VisitTime”
Plugins[] = “VisitorInterest”
Plugins[] = “ExampleAPI”
Plugins[] = “RssWidget”
Plugins[] = “Feedback”
Plugins[] = “Monolog”
Plugins[] = “Login”
Plugins[] = “TwoFactorAuth”
Plugins[] = “UsersManager”
Plugins[] = “SitesManager”
Plugins[] = “Installation”
Plugins[] = “CoreUpdater”
Plugins[] = “CoreConsole”
Plugins[] = “ScheduledReports”
Plugins[] = “UserCountryMap”
Plugins[] = “Live”
Plugins[] = “CustomVariables”
Plugins[] = “PrivacyManager”
Plugins[] = “ImageGraph”
Plugins[] = “Annotations”
Plugins[] = “MobileMessaging”
Plugins[] = “Overlay”
Plugins[] = “SegmentEditor”
Plugins[] = “Insights”
Plugins[] = “Morpheus”
Plugins[] = “Contents”
Plugins[] = “BulkTracking”
Plugins[] = “Resolution”
Plugins[] = “DevicePlugins”
Plugins[] = “Heartbeat”
Plugins[] = “Intl”
Plugins[] = “Marketplace”
Plugins[] = “ProfessionalServices”
Plugins[] = “UserId”
Plugins[] = “CustomPiwikJs”
Plugins[] = “Tour”
Plugins[] = “DBStats”
Plugins[] = “TagManager”
Plugins[] = “BotTracker”
Plugins[] = “FlagCounter”
Plugins[] = “HidePasswordReset”
Plugins[] = “MozWidgetByAmperage”
Plugins[] = “ReferrersManager”
Plugins[] = “TreemapVisualization”

[PluginsInstalled]
PluginsInstalled[] = “Diagnostics”
PluginsInstalled[] = “Login”
PluginsInstalled[] = “CoreAdminHome”
PluginsInstalled[] = “UsersManager”
PluginsInstalled[] = “SitesManager”
PluginsInstalled[] = “Installation”
PluginsInstalled[] = “Monolog”
PluginsInstalled[] = “Intl”
PluginsInstalled[] = “CorePluginsAdmin”
PluginsInstalled[] = “CoreHome”
PluginsInstalled[] = “WebsiteMeasurable”
PluginsInstalled[] = “IntranetMeasurable”
PluginsInstalled[] = “CoreVisualizations”
PluginsInstalled[] = “Proxy”
PluginsInstalled[] = “API”
PluginsInstalled[] = “ExamplePlugin”
PluginsInstalled[] = “Widgetize”
PluginsInstalled[] = “Transitions”
PluginsInstalled[] = “LanguagesManager”
PluginsInstalled[] = “Actions”
PluginsInstalled[] = “Dashboard”
PluginsInstalled[] = “MultiSites”
PluginsInstalled[] = “Referrers”
PluginsInstalled[] = “UserLanguage”
PluginsInstalled[] = “DevicesDetection”
PluginsInstalled[] = “Goals”
PluginsInstalled[] = “Ecommerce”
PluginsInstalled[] = “SEO”
PluginsInstalled[] = “Events”
PluginsInstalled[] = “UserCountry”
PluginsInstalled[] = “GeoIp2”
PluginsInstalled[] = “VisitsSummary”
PluginsInstalled[] = “VisitFrequency”
PluginsInstalled[] = “VisitTime”
PluginsInstalled[] = “VisitorInterest”
PluginsInstalled[] = “ExampleAPI”
PluginsInstalled[] = “RssWidget”
PluginsInstalled[] = “Feedback”
PluginsInstalled[] = “TwoFactorAuth”
PluginsInstalled[] = “CoreUpdater”
PluginsInstalled[] = “CoreConsole”
PluginsInstalled[] = “ScheduledReports”
PluginsInstalled[] = “UserCountryMap”
PluginsInstalled[] = “Live”
PluginsInstalled[] = “CustomVariables”
PluginsInstalled[] = “PrivacyManager”
PluginsInstalled[] = “ImageGraph”
PluginsInstalled[] = “Annotations”
PluginsInstalled[] = “MobileMessaging”
PluginsInstalled[] = “Overlay”
PluginsInstalled[] = “SegmentEditor”
PluginsInstalled[] = “Insights”
PluginsInstalled[] = “Morpheus”
PluginsInstalled[] = “Contents”
PluginsInstalled[] = “BulkTracking”
PluginsInstalled[] = “Resolution”
PluginsInstalled[] = “DevicePlugins”
PluginsInstalled[] = “Heartbeat”
PluginsInstalled[] = “Marketplace”
PluginsInstalled[] = “ProfessionalServices”
PluginsInstalled[] = “UserId”
PluginsInstalled[] = “CustomPiwikJs”
PluginsInstalled[] = “HidePasswordReset”
PluginsInstalled[] = “BotTracker”
PluginsInstalled[] = “TreemapVisualization”
PluginsInstalled[] = “ReferrersManager”
PluginsInstalled[] = “FlagCounter”
PluginsInstalled[] = “DBStats”
PluginsInstalled[] = “TagManager”
PluginsInstalled[] = “MozWidgetByAmperage”
PluginsInstalled[] = “Tour”

Classic fool, I am.

Adding the following to the .htaccess file in the matomo directory did the trick:

Referrer-Header

Header set Referrer-Policy "origin"