teklynk

#!/bin/bash

# I use this script on a few NGINX servers that are behind Cloudflare. I use it to restrict access and to only allow access from a Cloudflare IP addresses. 
# This means that clients must hit cloudflare's proxied DNS first before accessing your website, reventing clients from accessing your server via the host/server IP.  
# The script downloads a list of Cloudflare IP addresses, generates a allow list file, restarts NGINX, creates firewall rules using UFW, restarts UFW. 
# I run the script as a cron job on a weekly schedule.
 
# Add this line to your websites nginx config.
# include /etc/nginx/cloudflare_ips.conf;