Filament Cloudflare

Manage Cloudflare settings, firewall rules, cache, page rules, analytics, access apps, and edge caching directly from your Filament admin panel.

Installation

1. Install via Composer

composer require notwonderful/filament-cloudflare

2. Publish the config

php artisan vendor:publish --tag=cloudflare-config

3. Set Cloudflare credentials

Add to your .env file:

# Option 1: API Token (recommended)
CLOUDFLARE_TOKEN=your_api_token
CLOUDFLARE_ZONE_ID=your_zone_id
CLOUDFLARE_ACCOUNT_ID=your_account_id

# Option 2: Email + Global API Key
CLOUDFLARE_EMAIL=you@example.com
CLOUDFLARE_API_KEY=your_global_api_key
CLOUDFLARE_ZONE_ID=your_zone_id
CLOUDFLARE_ACCOUNT_ID=your_account_id

4. Register the plugin

In your Filament panel provider:

use notwonderful\FilamentCloudflare\CloudflarePlugin;

public function panel(Panel $panel): Panel
{
    return $panel
        ->plugin(CloudflarePlugin::make());
}

Features

Cloudflare API Coverage

Supported

• DNS Records management — CRUD (zones/{id}/dns_records)
• Zone Settings — read & edit (zones/{id}/settings)
• Zone Details — list & read (zones, zones/{id})
• Firewall Access Rules — CRUD (zones/{id}/firewall/access_rules/rules)
• User Agent Rules — CRUD (zones/{id}/firewall/ua_rules)
• Custom Firewall Rules — read-only (zones/{id}/rulesets/phases/http_request_firewall_custom/entrypoint)
• Cache Purge — purge all, by files, tags, hosts (zones/{id}/purge_cache)
• Cache Rules (Rulesets API) — CRUD (zones/{id}/rulesets/phases/http_request_cache_settings/...)
• Page Rules — CRUD (zones/{id}/pagerules)
• Analytics (GraphQL) — zone analytics, captcha, rule activity, DMARC
• Access Applications — create, read, delete (accounts/{id}/access/apps)
• Access Groups — read (accounts/{id}/access/groups)
• Access Identity Providers — read (accounts/{id}/access/identity_providers)
• Edge Caching — guest page caching & media caching (built on Cache Rules)

Not Supported

• SSL/TLS Certificate management
• Workers / Workers Routes
• Load Balancing
• Rate Limiting (rulesets API)
• WAF Managed Rulesets
• Spectrum
• Argo Smart Routing
• R2 Storage
• D1 Database
• Pages (deployment)
• Tunnel management
• Email Routing
• Waiting Room
• Bot Management

API Token Permissions

When creating a Cloudflare API Token, assign these permissions:

For read-only analytics, no additional permissions are needed beyond Zone Read (GraphQL API uses the same token).

Cloudflare API Deprecation Notes

Some endpoints used by this plugin are deprecated by Cloudflare:

These features continue to work. Future versions of this plugin may migrate to their replacements.

Credits

Inspired by the DigitalPoint App for Cloudflare for XenForo.