documenation request: cloudflare / hardening of authelia with certs and nginx proxy manager about authelia HOT 4 CLOSED

to help mitigate risks with authelia / npm, non-cloudflare drive by traffic on my IP address I am only allowing traffic from cloudflare's published networks using pfsense and pfblockerng.

cloudflare ip4 lists here:
https://www.cloudflare.com/ips-v4

from authelia.

Improvements noted. Updates will be made on the new docs site: https://docs.ibracorp.io

from authelia.

Excellent points! This is certainly valuable to the community and I will update it shortly to reflect your suggestions

from authelia.

Another idea for optional configs, users might benefit from tips on cloudflare firewall rules as well. My home ip changes but it's simple enough to update in cloudflare. I created two rules to filter cloudflare to only allow my home and VPN ip.

Allow rule
(ip.src eq ) or (ip.src eq )
Then action allow

Deny Rule
(ip.src ne ) or (ip.src ne )
Then action deny

Not sure if I need the redundant rules but it can't hurt.

from authelia.