[nginx configuration for thirtybees]

Another suggestion is to use a cronjob to update ip list from cloudflare.

In my case:

I use centminmod framework in the vps and I just learned that it have by default a script installed that update nginx conf with latest ip list:

You can take a look at it here:

https://community.centminmod.com/threads/csfcf-sh-automate-cloudflare-nginx-csf-firewall-setups.6241/

You can see the script (csfcf.sh) here:

https://github.com/centminmod/centminmod/tree/master/tools

Cronjob run the script, the script update /usr/local/nginx/conf/cloudflare.conf included in the main nginx conf by default (commented):

#include /usr/local/nginx/conf/cloudflare.conf;

So in my case I added the cronjob and uncommented the include row in the main nginx conf. That's it.

Thank you George Liu (eva2000)! ^_^

[nginx configuration for thirtybees]

@datakickCloudflare added some ipv4 classes (see below). Do you reccomended to add them to the nginx configuration too?

173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/13
104.24.0.0/14
172.64.0.0/13
131.0.72.0/22

source: https://www.cloudflare.com/ips-v4