Struct CloudflareClient 

pub struct CloudflareClient { /* private fields */ }

Cloudflare API client for DNS and Origin CA management

Implementations

impl CloudflareClient

pub fn new(config: &ResolvedCloudflareConfig, base_domain: &str) -> Self

pub async fn create_record( &self, subdomain: &str, proxied: bool, ) -> Result<String, CloudflareError>

Create a DNS record for a subdomain (A record for IP, CNAME for hostname)

Arguments

• subdomain - The subdomain to create (e.g., “myapp”)
• proxied - Whether to proxy through Cloudflare (true for HTTP, false for TCP)

Returns

The DNS record ID for later deletion

pub async fn delete_record( &self, record_id: &str, ) -> Result<(), CloudflareError>

Delete a DNS record

pub async fn create_origin_certificate( &self, validity_days: u32, ) -> Result<OriginCertificate, CloudflareError>

Create an Origin CA certificate for the base domain

This generates a private key and CSR locally, then requests a certificate from Cloudflare’s Origin CA. The certificate is valid for HTTPS connections from Cloudflare to this origin server (Full Strict mode).

Arguments

• validity_days - Certificate validity in days (default: 365)

Returns

An OriginCertificate containing the certificate and private key in PEM format

pub async fn cleanup_old_origin_certificates( &self, ) -> Result<u32, CloudflareError>

Clean up old Origin CA certificates for this domain

This revokes any existing Origin CA certificates that match our base domain (either *.base_domain or base_domain). Should be called before creating a new certificate to avoid accumulating old ones.

Trait Implementations

impl DnsProvider for CloudflareClient

fn create_record<'life0, 'life1, 'async_trait>( &'life0 self, subdomain: &'life1 str, proxied: bool, ) -> Pin<Box<dyn Future<Output = Result<String, DnsError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Create a DNS record for a subdomain

fn delete_record<'life0, 'life1, 'async_trait>( &'life0 self, record_id: &'life1 str, ) -> Pin<Box<dyn Future<Output = Result<(), DnsError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait, 'life1: 'async_trait,

Delete a DNS record by its ID

fn create_origin_certificate<'life0, 'async_trait>( &'life0 self, validity_days: u32, ) -> Pin<Box<dyn Future<Output = Result<Option<OriginCertificate>, DnsError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Create an origin certificate for HTTPS

fn cleanup_old_origin_certificates<'life0, 'async_trait>( &'life0 self, ) -> Pin<Box<dyn Future<Output = Result<u32, DnsError>> + Send + 'async_trait>>

where Self: 'async_trait, 'life0: 'async_trait,

Clean up old origin certificates for this domain