From e1d2cb3b59cdaa0462b6fb8dd961810e48304854 Mon Sep 17 00:00:00 2001 From: Joao Gilberto Magalhaes Date: Thu, 4 Dec 2025 10:22:04 -0500 Subject: [PATCH] Update Cloudflare examples to improve IP list as part of idempotent configuration - Added `echo Are there some specific_headers missing?` - These required unlocks plugin documentation consistency --- .gitignore | 1 + examples/docker/docker-compose-cloudflare.yml | 6 ++++-- examples/swarm/cloudflare.yml | 1 + examples/swarm/plugins-combined.yml | 1 + 4 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.gitignore b/.gitignore index 7cfbb8e..a32f7e6 100644 --- a/.gitignore +++ b/.gitignore @@ -14,3 +14,4 @@ __pycache__ /examples/swarm/certs/host2.local.pem /examples/docker/jwt_private.pem /examples/docker/jwt_pubkey.pem +/examples/docker/cloudflare_ips.lst diff --git a/examples/docker/docker-compose-cloudflare.yml b/examples/docker/docker-compose-cloudflare.yml index 49bfe50..5325031 100644 --- a/examples/docker/docker-compose-cloudflare.yml +++ b/examples/docker/docker-compose-cloudflare.yml @@ -12,6 +12,7 @@ # ```bash # # Download Cloudflare IP ranges (idempotent - overwrites if exists) # curl -s https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl -s https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # # # Add to /etc/hosts (idempotent) @@ -74,5 +75,6 @@ services: # Enable Cloudflare plugin easyhaproxy.http.plugins: cloudflare - # Optional: Specify custom IP list path - # easyhaproxy.http.plugin.cloudflare.ip_list_path: /etc/haproxy/cloudflare_ips.lst + # Use custom IP list (disable built-in IPs) + easyhaproxy.http.plugin.cloudflare.use_builtin_ips: false + easyhaproxy.http.plugin.cloudflare.ip_list_path: /etc/haproxy/cloudflare_ips.lst diff --git a/examples/swarm/cloudflare.yml b/examples/swarm/cloudflare.yml index 5a0be1e..c00ec74 100644 --- a/examples/swarm/cloudflare.yml +++ b/examples/swarm/cloudflare.yml @@ -21,6 +21,7 @@ # # # Download Cloudflare IP ranges and create Docker config # curl https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # docker config create cloudflare_ips cloudflare_ips.lst # rm cloudflare_ips.lst diff --git a/examples/swarm/plugins-combined.yml b/examples/swarm/plugins-combined.yml index b48c493..fb8843c 100644 --- a/examples/swarm/plugins-combined.yml +++ b/examples/swarm/plugins-combined.yml @@ -28,6 +28,7 @@ # # # Download Cloudflare IP ranges and create Docker config # curl https://www.cloudflare.com/ips-v4 > cloudflare_ips.lst +# echo "" >> cloudflare_ips.lst # curl https://www.cloudflare.com/ips-v6 >> cloudflare_ips.lst # docker config create cloudflare_ips cloudflare_ips.lst # rm cloudflare_ips.lst jwt_private.pem jwt_pubkey.pem