Last active
January 5, 2023 13:12
-
-
Save udienz/a11b657695e25b0b5b588c6c8b46c13c to your computer and use it in GitHub Desktop.
Nginx+Cloudflare, restore and limit access only from cloudflare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Cloudflare IP's | |
| allow 173.245.48.0/20; | |
| allow 103.21.244.0/22; | |
| allow 103.22.200.0/22; | |
| allow 103.31.4.0/22; | |
| allow 141.101.64.0/18; | |
| allow 108.162.192.0/18; | |
| allow 190.93.240.0/20; | |
| allow 188.114.96.0/20; | |
| allow 197.234.240.0/22; | |
| allow 198.41.128.0/17; | |
| allow 162.158.0.0/15; | |
| allow 104.16.0.0/13; | |
| allow 104.24.0.0/14; | |
| allow 172.64.0.0/13; | |
| allow 131.0.72.0/22; | |
| allow 2400:cb00::/32; | |
| allow 2606:4700::/32; | |
| allow 2803:f800::/32; | |
| allow 2405:b500::/32; | |
| allow 2405:8100::/32; | |
| allow 2a06:98c0::/29; | |
| allow 2c0f:f248::/32; | |
| # Private IP's | |
| # RFC1918 | |
| allow 10.0.0.0/8; | |
| allow 172.16.0.0/12; | |
| allow 192.168.0.0/16; | |
| # RFC4193 | |
| allow fd00::/8; | |
| # loopback | |
| allow 127.0.0.0/8; | |
| allow ::/128; | |
| deny all; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| set_real_ip_from 173.245.48.0/20; | |
| set_real_ip_from 103.21.244.0/22; | |
| set_real_ip_from 103.22.200.0/22; | |
| set_real_ip_from 103.31.4.0/22; | |
| set_real_ip_from 141.101.64.0/18; | |
| set_real_ip_from 108.162.192.0/18; | |
| set_real_ip_from 190.93.240.0/20; | |
| set_real_ip_from 188.114.96.0/20; | |
| set_real_ip_from 197.234.240.0/22; | |
| set_real_ip_from 198.41.128.0/17; | |
| set_real_ip_from 162.158.0.0/15; | |
| set_real_ip_from 104.16.0.0/13; | |
| set_real_ip_from 104.24.0.0/14; | |
| set_real_ip_from 172.64.0.0/13; | |
| set_real_ip_from 131.0.72.0/22; | |
| set_real_ip_from 2400:cb00::/32; | |
| set_real_ip_from 2606:4700::/32; | |
| set_real_ip_from 2803:f800::/32; | |
| set_real_ip_from 2405:b500::/32; | |
| set_real_ip_from 2405:8100::/32; | |
| set_real_ip_from 2a06:98c0::/29; | |
| set_real_ip_from 2c0f:f248::/32; | |
| real_ip_header CF-Connecting-IP; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment