script to add all cloudflare IPs to iptables

cloudflare-ip.sh

#!/bin/sh
exec > /var/log/cloudflare.log 2>&1
set -x
for ip in $(curl -s https://www.cloudflare.com/ips-v4); do /usr/sbin/iptables -I INPUT -p tcp -m multiport --dports http,https -s "$ip" -j ACCEPT; done
for ip in $(curl -s https://www.cloudflare.com/ips-v6); do /usr/sbin/ip6tables -I INPUT -p tcp -m multiport --dports http,https -s "$ip" -j ACCEPT; done

cloudflare-iptables.service

#!/bin/sh

[Unit]
Description=Add cloudflare ips to iptables
After=network.target

[Service]
Type=simple
ExecStart=/usr/bin/sh /usr/local/src/cloudflare-ip.sh

[Install]
WantedBy=multi-user.target