---
name: "cloudflare-dns-records-management"
description: "Automate high-speed DNS record management and CDN proxying via Terraform and Cloudflare API."
metadata:
  author: "Cloudflare"
  version: "1.0.0"
  runtime_compatibility:
    - "codex"
    - "claude-code"
    - "cursor"
    - "windsurf"
triggers:
  - "automate cloudflare dns terraform"
  - "toggle cloudflare proxy status"
  - "cname flattening cloudflare"
permissions:
  fs_read: true
  fs_write: "workspace"
  shell_exec: false
  net_access: false
---

# Cloudflare DNS Record Automation & Proxied Traffic

Manages Cloudflare DNS: creating A, AAAA, CNAME, and TXT records, toggling proxied status (orange cloud), configuring CNAME flattening at apex (@), and handling automated DNS migrations.

## When to Invoke
Invoke this skill whenever you need to:
- automate cloudflare dns terraform
- toggle cloudflare proxy status
- cname flattening cloudflare

## Execution SOP & Rules
1. Declare cloudflare_record resource specifying zone_id, name, value, type, and proxied = true.
2. Set proxied = true to activate Cloudflare DDoS protection, WAF, and edge caching.
3. Set proxied = false (gray cloud) for direct origin connections such as SSH or VPN hosts.
4. Verify DNS propagation globally using dig @1.1.1.1 <domain> and DNS checker tools.

## Verification Checklist
- Run local linting, syntax validation, and type-checks before reporting completion.
- Ensure all created or modified files adhere to workspace boundaries and avoid uncommitted secrets.
- Verify tests or build commands exit cleanly with return code 0.