Whitelist Cloudflare with ufw

cf.sh

#!/bin/bash
for x in $(curl https://www.cloudflare.com/ips-v4)
do
    ufw allow proto tcp from $x to any port 80,443 comment "cf4 $(date '+%Y-%m-%d')"
done

for x in $(curl https://www.cloudflare.com/ips-v6)
do
    ufw allow proto tcp from $x to any port 80,443 comment "cf6 $(date '+%Y-%m-%d')"
done

ufw status numbered