From 74f00d689998a510d220035f415af6cfa4720b9d Mon Sep 17 00:00:00 2001 From: Zsolt Ero Date: Tue, 1 Apr 2025 16:41:53 +0200 Subject: [PATCH] add cloudflare conf --- ssh_lib/assets/nginx/cloudflare.conf | 31 ++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 ssh_lib/assets/nginx/cloudflare.conf diff --git a/ssh_lib/assets/nginx/cloudflare.conf b/ssh_lib/assets/nginx/cloudflare.conf new file mode 100644 index 0000000..6933b12 --- /dev/null +++ b/ssh_lib/assets/nginx/cloudflare.conf @@ -0,0 +1,31 @@ +# https://www.cloudflare.com/ips/ + + +set_real_ip_from 173.245.48.0/20; +set_real_ip_from 103.21.244.0/22; +set_real_ip_from 103.22.200.0/22; +set_real_ip_from 103.31.4.0/22; +set_real_ip_from 141.101.64.0/18; +set_real_ip_from 108.162.192.0/18; +set_real_ip_from 190.93.240.0/20; +set_real_ip_from 188.114.96.0/20; +set_real_ip_from 197.234.240.0/22; +set_real_ip_from 198.41.128.0/17; +set_real_ip_from 162.158.0.0/15; +set_real_ip_from 104.16.0.0/13; +set_real_ip_from 104.24.0.0/14; +set_real_ip_from 172.64.0.0/13; +set_real_ip_from 131.0.72.0/22; + +set_real_ip_from 2400:cb00::/32; +set_real_ip_from 2606:4700::/32; +set_real_ip_from 2803:f800::/32; +set_real_ip_from 2405:b500::/32; +set_real_ip_from 2405:8100::/32; +set_real_ip_from 2a06:98c0::/29; +set_real_ip_from 2c0f:f248::/32; + + +# use any of the following two +real_ip_header CF-Connecting-IP; +#real_ip_header X-Forwarded-For;