When you sit behind Cloudflare, you should only allow traffic from Cloudflare’s IP ranges on ports 80 and 443. Cloudflare periodically updates these ranges, so the UFW rules need to be refreshed automatically. The script from cloudflare‑ufw, by Paul Reed, does exactly that. 1. Download and make the script executable 2. Inspect current UFW rules … Continue reading How to Auto‑update UFW rules with Cloudflare IPs