forked from LengKundee/MQL5-Google-Onedrive

google-labs-jules[bot] b528ef932e Add Cloudflare management scripts and tunnel setup

- Created `scripts/manage_cloudflare.py` to get/set security levels via API.
- Created `scripts/setup_cloudflare_tunnel.sh` to install `cloudflared`.
- Created `config/vault.json` with user-provided Zone/Account IDs for `lengkundee01.org`.
- Created `docs/CLOUDFLARE_GUIDE.md` with usage instructions.
- Updated `requirements.txt` to include `requests` as a core dependency.

2026-01-25 02:59:06 +00:00

2.3 KiB

Raw Permalink Blame History

Cloudflare Management & Tunnel Guide

This guide explains how to manage your Cloudflare settings and set up a secure tunnel for lengkundee01.org.

Prerequisite: API Token

Log in to the Cloudflare Dashboard.
Go to My Profile -> API Tokens.
Create a token with the following permissions:
- Zone - Zone Settings - Edit (for changing security levels)
- Zone - DNS - Edit (for tunnel DNS routing)
- Account - Cloudflare Tunnel - Edit (for managing tunnels)
Copy the token.
Edit config/vault.json and paste your token:
```
"api_token": "YOUR_ACTUAL_TOKEN_HERE"
```

Managing Security Level

You can check or change the "Under Attack Mode" or security level using the provided script.

Check Status:

python scripts/manage_cloudflare.py --status

Set Security Level: Available levels: off, essentially_off, low, medium, high, under_attack.

# Enable Under Attack Mode
python scripts/manage_cloudflare.py --set under_attack

# Set to Medium
python scripts/manage_cloudflare.py --set medium

Setting up Cloudflare Tunnel (1.1.1.1 / WARP)

To securely expose your local service or connect to your private network:

Install cloudflared:

sudo ./scripts/setup_cloudflare_tunnel.sh

Login:
```
cloudflared tunnel login
```
Create a Tunnel:
```
cloudflared tunnel create genx_tunnel
```
Copy the Tunnel ID provided in the output.

Configure Tunnel: Create a file named config.yml (or ~/.cloudflared/config.yml):

tunnel: <Tunnel-UUID>
credentials-file: /root/.cloudflared/<Tunnel-UUID>.json

ingress:
  - hostname: lengkundee01.org
    service: http://localhost:8080
  - service: http_status:404

Route DNS:

cloudflared tunnel route dns genx_tunnel lengkundee01.org

Run the Tunnel:
```
cloudflared tunnel run genx_tunnel
```

1.1.1.1 WARP Connection

To use the 1.1.1.1 WARP client to access private resources:

Ensure "Zero Trust" is configured in your Cloudflare Dashboard.
Enroll your device in your Zero Trust organization.
Connect via the WARP client.

2.3 KiB Raw Permalink Blame History