docs: Add Cloudflare troubleshooting section to README

- Document 'Incorrect response' error and solutions
- Add FlareSolverr usage instructions
- Add common issues table
- Improve Firefox user.js for better Cloudflare compatibility

README.md

@@ -103,3 +103,49 @@ Persistence & Outputs
 
 Tip: For captchas or first-time login, run with `SHOW=1` and log in once; cookies stay in the profile. Notifications via `NOTIFY` help surface errors (e.g., captcha, login).
 
+## Troubleshooting
+
+### Cloudflare / "Incorrect response" Error (Epic Games)
+
+If you see **"Incorrect response. Please refresh the page."** or repeated "word word" text on the login page, Cloudflare is blocking the automated browser.
+
+**Solution 1: Use Docker Compose (recommended)**
+
+The included `docker-compose.yml` has FlareSolverr pre-configured:
+
+```bash
+docker compose up
+```
+
+**Solution 2: Manual login with persistent cookies**
+
+```bash
+docker run --rm -it \
+  -p 6080:6080 \
+  -v fgc-data:/fgc/data \
+  -v fgc-browser:/home/fgc/.cache/browser \
+  -e SHOW=1 \
+  -e EG_MODE=new \
+  git.sky-net.it/nocci/free-games-claimer:dev \
+  node epic-games
+```
+
+Then open `http://localhost:6080`, log in manually. Cookies are saved for subsequent runs.
+
+**Solution 3: Disable strict Firefox privacy settings**
+
+The entrypoint now creates a `user.js` with Cloudflare-friendly settings. If you still have issues, delete the browser profile to regenerate it:
+
+```bash
+docker volume rm fgc-browser
+```
+
+### Common Issues
+
+| Error | Cause | Fix |
+|-------|-------|-----|
+| "Incorrect response" | Cloudflare bot detection | Use FlareSolverr or manual login |
+| Captcha loop | IP flagged | Wait, change IP, or use FlareSolverr |
+| "Not signed in" timeout | Login expired | Run with `SHOW=1` and re-login |
+| Repeated "word" text | Cloudflare fingerprinting | See Cloudflare solutions above |
+

docker-entrypoint.sh

@@ -45,10 +45,17 @@ rm -f "$BROWSER_DIR"/parent.lock "$BROWSER_DIR"/lock "$BROWSER_DIR"/.parentlock
 # Only write the prefs file when the volume is writable (container runs as non-root).
 if [ -w "$BROWSER_DIR" ] && { [ ! -e "$BROWSER_DIR/user.js" ] || [ -w "$BROWSER_DIR/user.js" ] || rm -f "$BROWSER_DIR/user.js" 2>/dev/null; }; then
   cat << 'EOT' > "$BROWSER_DIR/user.js"
-user_pref("privacy.resistFingerprinting", true);
-// user_pref("privacy.resistFingerprinting.letterboxing", true);
-// user_pref("browser.contentblocking.category", "strict");
-// user_pref("webgl.disabled", true);
+// Anti-fingerprinting settings for Cloudflare bypass
+user_pref("privacy.resistFingerprinting", false); // Can trigger Cloudflare
+user_pref("privacy.resistFingerprinting.letterboxing", false);
+user_pref("browser.contentblocking.category", "standard");
+user_pref("webgl.disabled", false); // WebGL needed for some bot detection
+user_pref("webgl.enable-webgl2", true);
+user_pref("javascript.use_us_english_locale", true);
+user_pref("intl.accept_languages", "en-US,en");
+user_pref("privacy.trackingprotection.enabled", false); // Can interfere with Cloudflare
+user_pref("network.http.referer.default_policy", 2);
+user_pref("network.http.referer.XOriginPolicy", 0);
 EOT
 else
   echo "Warning: $BROWSER_DIR not writable; skipping user.js creation."