generate-nginx-cloudflare-allow.sh

#!/bin/bash

set -e

cf_ips() {
  echo "# https://www.cloudflare.com/ips"
  echo "geo \$realip_remote_addr \$cloudflare_ip {"
  echo "default          0;"

  for type in v4 v6; do
    echo "# IP$type"
    curl -sL "https://www.cloudflare.com/ips-$type/" | sed "s|\$| 1;|g"
    echo
  done
  echo "}"
  echo "# Generated at $(LC_ALL=C date)"
}

cf_ips > /path/to/allow-cloudflare.conf