maxmichels

#!/bin/bash
# Update the IP List for nginx config
# Allowed ips will be stored in /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf
# File is imported by /etc/nginx/nginx.conf

echo "#Cloudflare" > /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf;
for i in $(curl https://www.cloudflare.com/ips-v4 2>/dev/null); do
        echo "set_real_ip_from $i;" >> /etc/nginx/conf.d/00_real_ip_cloudflare_00.conf;
done

maxmichels

<Files xmlrpc.php>
order deny,allow
deny from all
</Files>

maxmichels

RewriteEngine On
RewriteCond %{HTTP_HOST}@@%{HTTP_REFERER} !^([^@]*)@@https?://\1/.*
RewriteRule .*\xmlrpc.php [NC,F]

maxmichels

### Keybase proof

I hereby claim:

  * I am maxmichels on github.
  * I am maxmichels (https://keybase.io/maxmichels) on keybase.
  * I have a public key whose fingerprint is 7A9C E1A6 F1B1 C51A 533C  CEE8 D4CC D866 8211 47C5

To claim this, I am signing this object: