Is the DNS record creation proxied by default?

By default, the CNAME creation commands in this skill enable Cloudflare's proxy (orange cloud) to ensure traffic flows through the Cloudflare Tunnel.

Does this skill expose my Cloudflare API token to the LLM?

No, the API token is stored securely in 1Password on your VPS and injected at the shell level during execution, ensuring it is never visible to Claude Code or logged.

Can I manage Cloudflare Tunnel ingress rules with this skill?

Yes, it provides specific commands to check, update, and set tunnel configurations, including wildcard ingress rules for routing traffic to local services.

What infrastructure is required to use this skill?

It is designed to run on a VPS using Docker Compose and 1Password CLI (op) for secret management, with Traefik typically acting as the reverse proxy.

How does it handle multiple Cloudflare zones?

The skill includes functionality to look up Zone IDs for secondary domains dynamically, allowing it to manage records across any domain authorized by your API token.

Cloudflare VPS Manager

Name: Cloudflare VPS Manager
Author: jkrumm

byjkrumm

0•

Cloud Infrastructure

Manages Cloudflare DNS records, tunnel ingress configurations, and multi-domain settings securely from a VPS environment.

This skill enables Claude to perform secure Cloudflare API operations for VPS-hosted applications without ever exposing sensitive API tokens directly to the model. By executing commands through an SSH bridge and leveraging 1Password for secret management, it facilitates seamless DNS record creation, tunnel ingress updates, and multi-zone lookups. It is specifically designed for developers who need to automate the public exposure of containerized services via Cloudflare Tunnels while maintaining production-grade security protocols and centralized infrastructure control.

Key Features

01Full DNS record management including CNAME, A, and TXT records

02Secure API execution via SSH without token exposure to the LLM

03Multi-domain and multi-zone support for complex app architectures

04Automated 1Password secret injection for safe production operations

05Cloudflare Tunnel ingress configuration and wildcard routing updates

060 GitHub stars

Use Cases

01Configuring Cloudflare Tunnel ingress rules to route traffic to Traefik

02Auditing and cleaning up DNS records across multiple managed zones

03Provisioning a new public subdomain for a Docker-hosted application

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jkrumm/vps cloudflare

For use in Claude.ai and ChatGPT