You need to define the filterable fields explicitly by design. Making every column filterable automatically can introduce vulnerabilities.
To expand on the answers above, you can retrieve a list of all filterable columns with Flop.Schema.filterable/1 and then get additional information on each field with Flop.Schema.field_info/2.
