Bash script for whitelisting cloudflare ips as well as setting nginx config to show real ips. Forked from: https://github.com/oasisfleeting/cloudflare-whitelister-nginx-real-ip

cloudflare.sh

#!/bin/bash
echo "#Cloudflare" > /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf;
iptables -D INPUT -j cloudflare;
iptables -F cloudflare;
iptables -X cloudflare;
iptables -N cloudflare;

for i in `curl https://www.cloudflare.com/ips-v4`; do
	iptables -A cloudflare -p tcp -m multiport --dports http,https -s $i -j ACCEPT;
	echo "set_real_ip_from $i;" >> /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf;
done

iptables -A cloudflare -p tcp -m multiport --dports http,https -j DROP
iptables -A INPUT -j cloudflare;

echo "real_ip_header CF-Connecting-IP;" >> /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf;