Follow along with the video below to see how to install our site as a web app on your home screen.
Note: This feature may not be available in some browsers.
Features
Everything is available from within XenForo (you do not need to go to Cloudflare for things) via the Cloudflare API. This allows you give admins permission to do certain things (for example block IP addresses within Cloudflare without giving them access to your Cloudflare account).
It simplifies/automates much of the configuration and usage of Cloudflare with XenForo.
- Manage all Cloudflare settings/options for your zone.
- Ability to purge Cloudflare...
IMPORTANT for existing users: New functionality requires 1 additional API permissions in order to use the new function. You can go to your Cloudflare API Tokens, edit the token you have and add the following permission:
At this point, you should have a total of 19 permissions for your API token.
- Account.Billing: Read
- Added sanity check to make sure attachment data exists when using presigned URLs for R2...
- Added support for new Cloudflare setting: Speed -> Optimization -> Content Optimization -> Cloudflare Fonts
- When using "Easy config", set "Security level" to "Essentially off" (was set to "Medium" before)
- Easy config enables Cloudflare Fonts
Cloudflare changed API results for bot management, but only for paid plans. This addresses that.
Better handling of unexpected Cloudflare API changes.
- Completely revamped how the bot management API is handled
- Added Super Bot Fight mode settings as controllable options (options enabled/available to be toggled will ultimately depend on what your Cloudflare plan allows):
- Likely Automated
- Definitely Automated
- Verified Bots
- Static Resource Protection
- Optimize For WordPress
- JavaScript Detections
- The Cloudflare Fonts option ID has changed. This addresses that (it's what I get for giving the ability to toggle options that Cloudflare has deemed "beta"... they are subject to change).
- Added a sanity check so if future option IDs change, it won't throw an error (along with not being able to change them). Instead, that option won't change until the ID is updated.
- Added link for info about why each Cloudflare token permission is needed
- Updated deep links into R2 buckets to use new URL endpoint
- Suppress Cloudflare rate limit error when purging URLs from cache when guest page caching is enabled (a very high traffic site could hit API rate limits if there's a zillion posts flowing in at once)
- Better handling of situation where Cloudflare API is down/unavailable
- Cloudflare Workers that are created for the image proxy and unfurl proxy...