firewall-cloudflare

Terraform Module for DigitalOcean Firewall + Cloudflare This module allows you to create a DigitalOcean Firewall that only accepts inbound connections from Cloudflare's published list of IP addresses. Why would I use this? Cloudflare provides DDOS protection for domains using its DNS. If an attacker knows the IP address of your origin server, this can easily be circumvented. Using the approach in this module prevents incoming connections to the server from all non-Cloudflare IPs. This could be done at the server level using iptables or other firewall software. Though a missconfigured firewall could prevent you from accessing your server. Using a DigitalOcean Firewall, you can open or close additional ports as needed. This can also be achieved at the web server level using the DenyAllButClo