New feature: REJECT_CLOUDFLARE_IPS
Some IP detection providers occasionally return a Cloudflare anycast IP address
instead of your real public IP. When this happens, your DNS record gets updated
to point at Cloudflare infrastructure rather than your actual address.
Setting REJECT_CLOUDFLARE_IPS=true prevents this. Each update cycle will fetch
Cloudflare's published IP ranges and skip any detected IP that falls within them.
A warning is logged for every rejected IP.
The flag defaults to false (existing behavior is unchanged).
Example:
environment:
REJECT_CLOUDFLARE_IPS: "true"