RunCloud’s Cloudflare integration provides several benefits, including:

  • Use the DNS-01 validation method when deploying Let’s Encrypt SSL certificates.
  • Manage DNS records of your domains in your Cloudflare account directly in RunCloud.
  • Automatically add/update A records when creating a new web application, adding a domain name, and removing a web application.

Note: Availability of features may vary based on your current RunCloud plan. 

Here’s how you can connect your Cloudflare account to RunCloud:

How to Connect Cloudflare to RunCloud

To configure your Cloudflare integration in RunCloud, head to your Personal Space or Workspace Settings area. 

And from there, navigate to 3rd Party Integrations, as shown below: 

From there, select the Cloudflare integration from the list of available integrations and proceed by clicking Add Integration, as shown below: 

You’ll then be guided through the process of connecting your Cloudflare account. 

Label: The label just serves as a way of recalling which Cloudflare account you’ve connected (in the event that you connect multiple). 

This will be shown when using the Cloudflare integration in various areas in the RunCloud dashboard. For example, when creating a web application: 

Therefore, if you intend on connecting multiple Cloudflare accounts, we strongly recommend choosing a more easy to recognize label than “Cloudflare”. 

Cloudflare Email: Your Cloudflare account email address. 

API Tokens: This can either be your Cloudflare Global API Key or a Custom Token that you create with scoped access permissions.

To access that in your Cloudflare dashboard, you can click here.

Alternatively, simply head to your Profile. 

And, from there, head to API Tokens, as shown below: 

Then, once on the API tokens page, scroll down to the bottom. Here, you’ll find the Global API Key and Origin CA Key. To connect your Cloudflare account to RunCloud, you’ll want to use the Global API Key. To view (and subsequently copy it), click View. 

And, last but not least, copy your API key from the Cloudflare dashboard. 

Enter all of these details in RunCloud, and when ready, click Save Integration. 

If the connection to RunCloud has been established successfully, the integration will then save and you will see the following message:

If not, you will see an error message. In which case, please double-check that you have copied the correct API key and ensure that the account email address associated with the API key matches. And if the issue persists, please get in touch with our support team. 

Alternative Method: Create A Custom Token

As an alternative to using the Cloudflare Global API key, you can create a custom token that is specific to your Zone (i.e. domain in Cloudflare).

To do so, head to the connected domain name in Cloudflare, and then select Get your API token as shown below:

On the next screen, you can see your existing tokens and create new tokens. Click on the “Create Token” button to create a fresh API key.

Next, you will be asked to pick a template. You can use the “Edit Zone DNS” template to get started.

While configuring the token, make sure to grant it the following settings:

  • Account settings: Read
  • DNS: Edit
  • Zone: Edit

You can refer to the following screenshot to verify the settings:

Next, you will need to select the relevant account and zone resources. You can also specify whether you want to enable IP filtering or set an expiry date for the key.

Note: If your key expires, you will need to manually update it again in the RunCloud dashboard.

On the next screen, you will get a summary of your specified permissions. Verify all the settings and create the token. A token is only displayed once – DO NOT close this screen until integration is completed.

After creating the token, go to the RunCloud dashboard and open your account settings. Navigate to the Integration tab and look for Cloudflare. This time, instead of entering your Global API Key, instead enter the Custom Token, you’ve generated with scoped access to the zone you’ve granted it access to.

If you have any other questions or need help – please feel free to get in touch with our 24/7 support team. We’re here to help!