Only allow Cloudflare IPs for Discourse server

[riking (Kane York)]

Look at how ./templates/cloudflare.template.yml downloads the IP list and constructs set_real_ip_from from that list.

So you’d copy or modify that file to also generate allow directives, and add a deny all;.