Cloudflare dns deploy
Open-source Claude Code Skills that replace clicking through vendor dashboards — Stripe, Cloudflare DNS, ElevenLabs, GitHub, and more. Powered by Aria Code.
npx -y skills add iansteitz1-eng/aria-skills --skill cloudflare-dns-deployAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Reconcile DNS records from a declared YAML catalog to Cloudflare via the API, and optionally run the companion nginx + certbot bootstrap for records pointing at your server. Idempotent. --dry-run by default, --apply hits the API, --server-setup also wires nginx + obtains Let's Encrypt cert. Use when the user says "deploy DNS", "add a subdomain", "stand up <X>.example.com", or before any subdomain launch.
SKILL.md
2.0 KB, as published. Nobody here has run it
cloudflare-dns-deploy
YAML → Cloudflare DNS → nginx → certbot, in one command.
When to use
- New subdomain launches (replaces dashboard click + SSH + nginx + certbot dance)
- DNS audits (
--dry-runshows drift between YAML and live) - Multi-zone management (one YAML covers all your zones)
- Pruning stale records (
--prunedeletes A/AAAA/CNAME/TXT/MX not in YAML)
How it works
- Reads
dns_records.yaml - For each zone, lists current Cloudflare records
- For each declared record: matches by (zone, type, name). Creates if absent; patches if drift in content/TTL/proxied.
- With
--server-setup: waits for DNS propagation, enables nginx site, runs certbot, verifies HTTPS.
Env vars required
| Var | Required for | Notes |
|---|---|---|
CLOUDFLARE_API_TOKEN | all | Scoped Token (Zone:Read + DNS:Edit on target zones) |
Token creation: dash.cloudflare.com → My Profile → API Tokens → Create Token → "Edit zone DNS" template.
Safety
- Default is dry-run. No API write until
--apply. - Doesn't delete by default.
--pruneis the explicit opt-in to remove records. - Server-setup is opt-in. Default
--applyonly touches Cloudflare; you don't accidentally invoke certbot. - Cert renewal stays under certbot.timer — this skill issues; renewal is automatic via the system service.
Hosted version
Aria Code runs this with:
- Multi-zone team management
- Scheduled drift checks (alerts on manual dashboard changes)
- Approval workflow for
--pruneand--server-setup - Free tier · BYOK · no credit card
License
Apache 2.0