saving uncommitted changes in /etc prior to dnf run

nginx/cloudflare.conf

@@ -0,0 +1,29 @@
+# Cloudflare ip ranges
+set_real_ip_from 127.0.0.1;
+set_real_ip_from 173.245.48.0/20;
+set_real_ip_from 103.21.244.0/22;
+set_real_ip_from 103.22.200.0/22;
+set_real_ip_from 103.31.4.0/22;
+set_real_ip_from 141.101.64.0/18;
+set_real_ip_from 108.162.192.0/18;
+set_real_ip_from 190.93.240.0/20;
+set_real_ip_from 188.114.96.0/20;
+set_real_ip_from 197.234.240.0/22;
+set_real_ip_from 198.41.128.0/17;
+set_real_ip_from 162.158.0.0/15;
+set_real_ip_from 104.16.0.0/13;
+set_real_ip_from 104.24.0.0/14;
+set_real_ip_from 172.64.0.0/13;
+set_real_ip_from 131.0.72.0/22;
+set_real_ip_from 2400:cb00::/32;
+set_real_ip_from 2606:4700::/32;
+set_real_ip_from 2803:f800::/32;
+set_real_ip_from 2405:b500::/32;
+set_real_ip_from 2405:8100::/32;
+set_real_ip_from 2a06:98c0::/29;
+set_real_ip_from 2c0f:f248::/32;
+set_real_ip_from 137.184.57.12/32;
+set_real_ip_from 137.184.57.87/32;
+set_real_ip_from 143.244.200.175/32;
+#real_ip_header X-Forwarded-For;
+real_ip_header CF-Connecting-IP;

nginx/conf.d/898.ro.conf

@@ -0,0 +1,30 @@
+server {
+	listen 192.168.1.2:80;
+	server_name	898.ro www.898.ro;
+	charset	utf-8;
+	root /var/www/html;
+	index index.html;
+
+	access_log /var/log/nginx/898.ro.access.log;
+	error_log /var/log/nginx/898.ro.error.log;
+
+	# gzip should not be used with SSL
+	gzip off;
+
+	listen 192.168.1.2:443 ssl http2;
+	ssl_certificate /etc/letsencrypt/live/www.898.ro/fullchain.pem;
+	ssl_certificate_key /etc/letsencrypt/live/www.898.ro/privkey.pem;
+	include /etc/letsencrypt/options-ssl-nginx.conf;
+
+	# redirect www.898.ro to 898.ro for both HTTP and HTTPS
+	if ($host = www.898.ro) {
+		return 301 $scheme://898.ro$request_uri;
+	}
+
+	# default location - proxy to local Jekyll
+	location / {
+		proxy_pass http://127.0.0.1:4000;
+		proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+		proxy_set_header Host $http_host;
+	}
+}

nginx/nginx.conf

@@ -117,5 +117,8 @@ http {
         open_file_cache_min_uses 5;
         open_file_cache_errors on;
 
+    # Cloudflare
+    include /etc/nginx/cloudflare.conf;
+
     include /etc/nginx/conf.d/*.conf;
 }