skills.rest
MysticRyuujin
MysticRyuujinCOMMUNITY
Explore all skills by this author →
Website𝕏@MysticRyuujinGitHub

cloudflare

Configure Cloudflare DNS records, SSL modes, and zone-scoped API tokens.

1|Updated Apr 15, 2026
Search Tags:#cloudflare#dns#ssl#edge-delivery#wildcards#token-scoping
One-click install
npx skills add https://github.com/MysticRyuujin/spirens --skill cloudflare-mysticryuujin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: cloudflare
Source: https://github.com/MysticRyuujin/spirens/tree/main/cloudflare
Command: npx skills add https://github.com/MysticRyuujin/spirens --skill cloudflare-mysticryuujin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Cloudflare configuration for edge deployments can be tricky, with decisions about proxy vs DNS-only, SSL modes, token scoping, and wildcard limitations affecting reliability and security.

Core Features & Use Cases

  • Guidance on when to proxy vs DNS-only for individual DNS records and for subdomains.
  • Clear explanation of SSL/TLS modes (Off, Flexible, Full, Full (strict)) and when to use them safely.
  • Best practices for API token scoping to limit access to a single zone and required permissions.
  • Handling wildcard records and edge cases like ACM requirements and universal SSL behavior.

Quick Start

Configure a Cloudflare zone for SPIRENS and apply an API token scoped to DNS:Edit for that zone, then verify the setup with spirens doctor.

Frequently Asked Questions about cloudflare

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
When should I use Cloudflare proxy vs DNS-only for my DNS records?▼

Use Cloudflare proxy when you need edge delivery, SSL termination, and DDoS protection for a subdomain. Choose DNS-only when third-party services require direct origin routing or when proxying wildcard records causes conflicts with universal SSL or ACM validation.

Which Cloudflare SSL/TLS mode is safest for edge delivery?▼

Full (strict) is the safest Cloudflare SSL/TLS mode for edge delivery because it enforces valid origin certificates end-to-end. Avoid Flexible mode to prevent unencrypted traffic between Cloudflare and your origin server.

How do I scope Cloudflare API tokens to a single zone?▼

Scope Cloudflare API tokens to a single zone by selecting the specific zone resource and assigning only required permissions like DNS:Edit. This restricts access to that zone alone, preventing unauthorized modifications across multiple zones.

What are the limitations of Cloudflare wildcard proxy records?▼

Cloudflare wildcard proxy records face limitations because universal SSL does not cover proxied wildcards at all levels. ACM certificate validation and edge delivery for decentralized web deployments may fail without specific per-record DNS configurations.

How do I configure Cloudflare edge delivery for decentralized web deployments?▼

Configure Cloudflare edge delivery for decentralized web deployments by setting per-record DNS configurations, selecting the Full (strict) SSL mode, and applying zone-scoped API tokens. Verify your proxy and DNS settings with a diagnostic tool.

Related Skills

Explore More Software Engineering Skills→
psylchpsylch

cloudflare-dns

Manage Cloudflare DNS records via REST API with CRUD operations.

Community
Intermediate
naviktnavikt
2

sif-server-proxy-api-config

Diagnose server proxy and environment configuration mismatches for API and frontend paths.

Official
Intermediate
mahou-labsmahou-labs
1

building-mcp-server-on-cloudflare

Build and deploy MCP servers on Cloudflare with OAuth integration.

Official
Advanced
cwinvestmentscwinvestments
412

memstack-deployment-domain-ssl

Configure DNS records, SSL certificates, and HTTPS for custom domains.

Community
Intermediate