PROC / 00LOADING...EXPOSING PLATE
01
02
03
04
05
Manage your real Cloudflare DNS records from inside WHM and cPanel with scoped API tokens — so the records you edit are the ones that actually resolve, not a dead local zone.
Two plugins — one for WHM (the server admin) and one for cPanel (each
account user) — that add a Cloudflare DNS page where you list zones and
create, edit, and delete records directly against the Cloudflare API, using
scoped API tokens (never the Global API Key).
If a domain's nameservers point to Cloudflare, then Cloudflare — not your
server — is the authoritative DNS provider. But cPanel's built-in Zone Editor
keeps editing the local BIND/PowerDNS zone that the internet never queries. So
admins make changes, see them "saved," and nothing actually resolves
differently. It's a constant source of confused support tickets.
This plugin talks to Cloudflare directly, so the records you edit in WHM are the
records the world resolves. One place to manage DNS — and it's the
authoritative one.
A Cloudflare DNS page in both WHM (all zones the token can see) and cPanel
(each user's own zones).
Full record management: A, AAAA, CNAME, TXT, MX, NS, SRV.
Cloudflare proxy (orange-cloud) toggle, TTL, and MX priority.
Scoped API token, verified against Cloudflare on save.
CSRF-protected forms throughout.
Like its sibling WHM Cloudflare SSL, the WHM
plugin can bind outbound API calls to a specific egress interface — route
Cloudflare traffic over a VPN or tunnel on servers where api.cloudflare.com is
blocked on the default route. It's root-only, since interface binding needs
elevated privileges; per-user routing is left to the host admin.
The two plugins share a single Cloudflare API client and the same feature set;
they differ only in identity and scope — WHM runs as root against one
server-wide token at /var/cpanel/cloudflare/token and sees every zone, while
the cPanel plugin runs as the user against their own $HOME/.cloudflare/token
and sees only their domains. That same shared client and token are what the SSL
plugin reuses for its DNS-01 challenges.
Pure PHP (cPanel's bundled runtime) and the Cloudflare API. MIT licensed.