From 74bd6524d307d6ac2677c829eac08d6b1f2b32ff Mon Sep 17 00:00:00 2001
From: riking <rikingcoding@gmail.com>
Date: Tue, 2 Jun 2015 13:51:20 -0700
Subject: [PATCH] Version 3 of cloudflare.template.yml

---
 templates/cloudflare.template.yml | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)
 create mode 100644 templates/cloudflare.template.yml

diff --git a/templates/cloudflare.template.yml b/templates/cloudflare.template.yml
new file mode 100644
index 0000000..6d5e953
--- /dev/null
+++ b/templates/cloudflare.template.yml
@@ -0,0 +1,22 @@
+run:
+  - file:
+      path: /tmp/add-cloudflare-ips
+      chmod: +x
+      contents: |
+        #!/bin/bash -e
+        # Download list of CloudFlare ips
+        wget https://www.cloudflare.com/ips-v4 -O - > /tmp/cloudflare-ips
+        echo >> /tmp/cloudflare-ips
+        wget https://www.cloudflare.com/ips-v6 -O - >> /tmp/cloudflare-ips
+        # Make into nginx commands and escape for inclusion into sed append command
+        CONTENTS=$(</tmp/cloudflare-ips sed 's/^/set_real_ip_from /' | sed 's/$/;/' | tr '\n' '\\' | sed 's/\\/\\n/g')
+        
+        echo CloudFlare IPs:
+        echo $(echo | sed "/^/a $CONTENTS")
+        # Insert into discourse.conf
+        sed -i "/sendfile on;/a $CONTENTS\nreal_ip_header CF-Connecting-IP;" /etc/nginx/conf.d/discourse.conf
+        # Clean up
+        rm /tmp/cloudflare-ips
+
+  - exec: "/tmp/add-cloudflare-ips"
+  - exec: "rm /tmp/add-cloudflare-ips"
-- 
2.25.1