From fd07a012495b65108222aba2e63827f1cb0cd853 Mon Sep 17 00:00:00 2001 From: Hakase Date: Mon, 27 Jan 2020 18:34:36 +0900 Subject: [PATCH] Fix nginx.conf (Cloudflare IPs) --- conf/nginx.conf | 41 +++++++++++++++++++++++------------------ 1 file changed, 23 insertions(+), 18 deletions(-) diff --git a/conf/nginx.conf b/conf/nginx.conf index 790ebe4..be3b1b9 100644 --- a/conf/nginx.conf +++ b/conf/nginx.conf @@ -31,24 +31,29 @@ http { variables_hash_max_size 2048; # Cloudflare CDN - set_real_ip_from 199.27.128.0/21; - set_real_ip_from 173.245.48.0/20; - set_real_ip_from 103.21.244.0/22; - set_real_ip_from 103.22.200.0/22; - set_real_ip_from 103.31.4.0/22; - set_real_ip_from 141.101.64.0/18; - set_real_ip_from 108.162.192.0/18; - set_real_ip_from 190.93.240.0/20; - set_real_ip_from 188.114.96.0/20; - set_real_ip_from 197.234.240.0/22; - set_real_ip_from 198.41.128.0/17; - set_real_ip_from 162.158.0.0/15; - set_real_ip_from 104.16.0.0/12; - #set_real_ip_from 2400:cb00::/32; - #set_real_ip_from 2606:4700::/32; - #set_real_ip_from 2803:f800::/32; - #set_real_ip_from 2405:b500::/32; - #set_real_ip_from 2405:8100::/32; + # IPv4 + set_real_ip_from 173.245.48.0/20; + set_real_ip_from 103.21.244.0/22; + set_real_ip_from 103.22.200.0/22; + set_real_ip_from 103.31.4.0/22; + set_real_ip_from 141.101.64.0/18; + set_real_ip_from 108.162.192.0/18; + set_real_ip_from 190.93.240.0/20; + set_real_ip_from 188.114.96.0/20; + set_real_ip_from 197.234.240.0/22; + set_real_ip_from 198.41.128.0/17; + set_real_ip_from 162.158.0.0/15; + set_real_ip_from 104.16.0.0/12; + set_real_ip_from 172.64.0.0/13; + set_real_ip_from 131.0.72.0/22; + # IPv6 + #set_real_ip_from 2400:cb00::/32; + #set_real_ip_from 2606:4700::/32; + #set_real_ip_from 2803:f800::/32; + #set_real_ip_from 2405:b500::/32; + #set_real_ip_from 2405:8100::/32; + #set_real_ip_from 2a06:98c0::/29; + #set_real_ip_from 2c0f:f248::/32; real_ip_header CF-Connecting-IP; # SSL Config