Cloudflare by notwonderful

• Installation
  • 1. Install via Composer
  • 2. Publish the config
  • 3. Set Cloudflare credentials
  • 4. Register the plugin
• Features
• Cloudflare API Coverage
  • Supported
  • Not Supported
• API Token Permissions
• Cloudflare API Deprecation Notes
• Credits

#Installation

#1. Install via Composer

composer require notwonderful/filament-cloudflare

#2. Publish the config

php artisan vendor:publish --tag=cloudflare-config

#3. Set Cloudflare credentials

Add to your .env file:

# Option 1: API Token (recommended)
CLOUDFLARE_TOKEN=your_api_token
CLOUDFLARE_ZONE_ID=your_zone_id
CLOUDFLARE_ACCOUNT_ID=your_account_id

# Option 2: Email + Global API Key
[email protected]
CLOUDFLARE_API_KEY=your_global_api_key
CLOUDFLARE_ZONE_ID=your_zone_id
CLOUDFLARE_ACCOUNT_ID=your_account_id

#4. Register the plugin

In your Filament panel provider:

use notwonderful\FilamentCloudflare\CloudflarePlugin;

public function panel(Panel $panel): Panel
{
    return $panel
        ->plugin(CloudflarePlugin::make());
}

#Features

#Cloudflare API Coverage

#Supported

• DNS Records management — CRUD (zones/{id}/dns_records)
• Zone Settings — read & edit (zones/{id}/settings)
• Zone Details — list & read (zones, zones/{id})
• Firewall Access Rules — CRUD (zones/{id}/firewall/access_rules/rules)
• User Agent Rules — CRUD (zones/{id}/firewall/ua_rules)
• Custom Firewall Rules — read-only (zones/{id}/rulesets/phases/http_request_firewall_custom/entrypoint)
• Cache Purge — purge all, by files, tags, hosts (zones/{id}/purge_cache)
• Cache Rules (Rulesets API) — CRUD (zones/{id}/rulesets/phases/http_request_cache_settings/...)
• Page Rules — CRUD (zones/{id}/pagerules)
• Analytics (GraphQL) — zone analytics, captcha, rule activity, DMARC
• Access Applications — create, read, delete (accounts/{id}/access/apps)
• Access Groups — read (accounts/{id}/access/groups)
• Access Identity Providers — read (accounts/{id}/access/identity_providers)
• Edge Caching — guest page caching & media caching (built on Cache Rules)

#Not Supported

• SSL/TLS Certificate management
• Workers / Workers Routes
• Load Balancing
• Rate Limiting (rulesets API)
• WAF Managed Rulesets
• Spectrum
• Argo Smart Routing
• R2 Storage
• D1 Database
• Pages (deployment)
• Tunnel management
• Email Routing
• Waiting Room
• Bot Management

#API Token Permissions

When creating a Cloudflare API Token, assign these permissions:

For read-only analytics, no additional permissions are needed beyond Zone Read (GraphQL API uses the same token).

#Cloudflare API Deprecation Notes

Some endpoints used by this plugin are deprecated by Cloudflare:

These features continue to work. Future versions of this plugin may migrate to their replacements.

#Credits

Inspired by the DigitalPoint App for Cloudflare for XenForo.