Allow only (currently Cloudflare's) IPv4 and IPv6 addresses to https on your system firewall(supporting only CentOS 7 w/ firewalld currently), used for full reverse proxying.