[Definition]
actionstart =
actionstop =
actioncheck =
actionban = curl -s \
   -H "X-Auth-Email: <cf_email>" \
   -H "X-Auth-Key: <cf_token>" \
   -H "Content-Type: application/json" \
   -X POST "https://api.cloudflare.com/client/v4/zones/&lt;cf_zoneid>/firewall/access_rules/rules" \
   --data '{"mode":"block","configuration":{"target":"ip","value":"<ip>"},"notes":"Fail2ban"}'
actionunban = curl -s \
   -H "X-Auth-Email: <cf_email>" \
   -H "X-Auth-Key: <cf_token>" \
   -H "Content-Type: application/json" \
   -X DELETE "https://api.cloudflare.com/client/v4/zones/&lt;cf_zoneid>/firewall/access_rules/rules/"$( \
      curl -s -H "X-Auth-Email: <cf_email>" \
         -H "X-Auth-Key: <cf_token>" \
         -H "Content-Type: application/json" \
         -X GET "https://api.cloudflare.com/client/v4/zones/&lt;cf_zoneid&gt;/firewall/access_rules/rules?mode=block&amp;configuration_target=ip&amp;configuration_value=&lt;ip>&page=1&per_page=1&match=all" \
         |jq --raw-output '.result[] .id')
[Init]