Skip to content

Cloudflare

Connect a Cloudflare account once (Accounts → Connect an account; the setup lists the token’s permissions, as does Providers), then on an app’s Settings connect:

The host: recent deploys, and whether your last push is live.

For a Worker built by Workers Builds, the commit and any failed build come from the “Workers Builds: …” check Cloudflare posts on GitHub, so the app also needs its GitHub connection; a failed build notifies you through it. A Pages project has Redeploy (with Allow actions on the account, and Cloudflare Pages: Edit on the token). Workers have none.

For a Worker with Workers Logs on, and Workers Observability: Edit on the token: errors as they happen, and an alert when they spike. See Runtime errors.

  • Health: active, not paused, the app’s DNS record, an active edge certificate.
  • Errors: an alert when 5xx errors reach 5% of at least 50 requests in the last hour or so.
  • Configuration: SSL/TLS mode, HTTPS, HSTS, minimum TLS, DNSSEC, scripts Cloudflare adds that your Content-Security-Policy blocks, www, Email Routing and Security Insights, on the app’s Configuration tab (details).
  • Traffic, on the app’s Traffic tab: requests, visitors, cached share and errors for 24 h, 7 or 30 days, plus visitors and top pages from Cloudflare Web Analytics when it’s switched on for the site.
  • Purge cache is an action (with “Allow actions” on the account, and the token’s Cache Purge permission).

A Workers Free account’s daily request allowance is watched too: see Free plan limits.

Nova-Shop's Traffic tab: requests, visitors, cache rate and errors from Cloudflare over the last 7 days. Nova-Shop's Traffic tab: requests, visitors, cache rate and errors from Cloudflare over the last 7 days.
Traffic from Cloudflare, on the app's Traffic tab.