diff --git a/.gitignore b/.gitignore index 7cfbb8e..a32f7e6 100644 --- a/.gitignore +++ b/.gitignore @@ -14,3 +14,4 @@ __pycache__ /examples/swarm/certs/host2.local.pem /examples/docker/jwt_private.pem /examples/docker/jwt_pubkey.pem +/examples/docker/cloudflare_ips.lst diff --git a/examples/docker/docker-compose-cloudflare.yml b/examples/docker/docker-compose-cloudflare.yml index 49bfe50..5325031 100644 --- a/examples/docker/docker-compose-cloudflare.yml +++ b/examples/docker/docker-compose-cloudflare.yml @@ -12,6 +12,7 @@ # ```bash # # Download Cloudflare IP ranges (idempotent - overwrites if exists) # curl -s https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl -s https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # # # Add to /etc/hosts (idempotent) @@ -74,5 +75,6 @@ services: # Enable Cloudflare plugin easyhaproxy.http.plugins: cloudflare - # Optional: Specify custom IP list path - # easyhaproxy.http.plugin.cloudflare.ip_list_path: /etc/haproxy/cloudflare_ips.lst + # Use custom IP list (disable built-in IPs) + easyhaproxy.http.plugin.cloudflare.use_builtin_ips: false + easyhaproxy.http.plugin.cloudflare.ip_list_path: /etc/haproxy/cloudflare_ips.lst diff --git a/examples/swarm/cloudflare.yml b/examples/swarm/cloudflare.yml index 5a0be1e..c00ec74 100644 --- a/examples/swarm/cloudflare.yml +++ b/examples/swarm/cloudflare.yml @@ -21,6 +21,7 @@ # # # Download Cloudflare IP ranges and create Docker config # curl https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # docker config create cloudflare_ips cloudflare_ips.lst # rm cloudflare_ips.lst diff --git a/examples/swarm/plugins-combined.yml b/examples/swarm/plugins-combined.yml index b48c493..fb8843c 100644 --- a/examples/swarm/plugins-combined.yml +++ b/examples/swarm/plugins-combined.yml @@ -28,6 +28,7 @@ # # # Download Cloudflare IP ranges and create Docker config # curl https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # docker config create cloudflare_ips cloudflare_ips.lst # rm cloudflare_ips.lst jwt_private.pem jwt_pubkey.pem