Cloudflare

If your domain is on Cloudflare, PSM calls the Cloudflare API directly, so you do not need the web dashboard. Everything is in main menu 13 (Cloudflare DDNS):

First choose Set API credentials and enter a Cloudflare API token (or the global API key); then the features below work.

DNS records

List / add / delete DNS records: point names at your nodes, subscriptions and camouflage sites without opening the Cloudflare dashboard.

DDNS

When the server's public IP changes (home broadband, or a VPS that changes IPs):

• DDNS: update now points the name at the current IP.
• DDNS: install the scheduled job checks every 5 minutes and updates the record when the IP changes.

Wildcard certificates

Issue a certificate automatically (DNS-01 wildcard): issues a *.example.com wildcard certificate through Cloudflare DNS validation, with no port 80 needed. How to use certificates: SSL certificates.

Tunnel and Access

• Cloudflare Tunnel publishes a service on this server (a web panel, say) at a domain through Cloudflare, without opening any port.
• Cloudflare Access puts a Cloudflare sign-in in front of such panels, so only the people you allow can open them.

Proxy nodes do not belong on a Tunnel

Tunnel suits HTTP services such as web panels. Connect proxy nodes to the server directly, or use a CDN-friendly transport such as XHTTP.