Add trusted Cloudflare IPs to a Caddyfile you can import

Caddyfile

localhost {
  import /include/cloudflare-proxies
}

update-ips.sh

#!/bin/bash
set -e -o pipefail

TARGET_FILE="/include/cloudflare-proxies"

IP4=$(curl -s https://www.cloudflare.com/ips-v4)
IP6=$(curl -s https://www.cloudflare.com/ips-v6)

cat << EOF | tee $TARGET_FILE
# Do NOT modify this file manually! It will be overwritten at a regular interval by ${BASH_SOURCE}!
trusted_proxies $(echo $IP4 $IP6 | xargs)
EOF