Guide · Connections

Connect Cloudflare, forget the records.

Kule uses Cloudflare’s official cf tool. You approve a code in the browser; after that, when you connect a domain, Kule creates the DNS record, sets the SSL mode and shows you records that have gone stale.

4 minLast updated: October 14, 2026

Before you start

  • A Cloudflare account and a domain added to it, with its nameservers pointed to Cloudflare
  • A server added to Kule with Dokploy installed
  • If your domain isn’t on Cloudflare, you don’t need this guide: see the Domain without Cloudflare guide.

1Start the connection

Choose Cloudflare in the Bağlantılar (Connections) section of Ayarlar (Settings). The same flow also opens when you connect a domain and it turns out the domain is on Cloudflare.

If cf isn’t on your Mac, Kule installs it in its own folder. This needs Node; if that is missing too, Kule downloads the LTS release of Node from nodejs.org and verifies it against the SHASUMS256 list nodejs.org publishes. You aren’t asked anything, and you don’t need to open a terminal.

2Approve in the browser

Kule starts the login with a device code. A one-time code appears on screen and Cloudflare’s approval page opens in your browser. Compare the code, choose your account and approve. Kule notices the approval on its own.

$ cf auth login --device
Opening the link and one-time code in the browser…
✓ Approved
cf keeps its session in its own file. Kule doesn’t read or copy this file and never sees a token; it only runs cf commands.

3Kule creates the record

When you connect a domain to an app, Kule finds the zone the domain belongs to and creates an A record pointing to the server’s IP address. If an A record with the same name exists, it updates that one instead of adding a second record. The record is added with the Cloudflare proxy on (orange cloud).

Then it sets the zone’s SSL mode to Full (strict): traffic between Cloudflare and your server is encrypted too, and the certificate on the server is verified. Dokploy’s Traefik gets the certificate on the server.

In Cloudflare, the SSL mode is a per-zone setting; it also affects other addresses under the same domain. If that name currently has a CNAME record, Kule doesn’t touch it and asks you to remove it first.

4The Domainler screen

In Domainler (Domains), all of your apps’ domains are grouped by the zones in your Cloudflare account. Kule checks over DNS where each record actually points and compares it with the server the domain is attached to.

If a record points to a different address, for example an old server you no longer use, the row is flagged. When you click Yönlendir (Repoint), the record is switched to the right server. Domains that aren’t on Cloudflare show up in the same list; for them, it says which value the record should be changed to at your domain registrar.

5Disconnecting

When you remove the Cloudflare connection in Ayarlar, Kule logs out of the cf session. The DNS records it created stay in Cloudflare as they are; your sites keep working.

Next steps

We'll let you know when Kule is out.

People on the list get the first version before anyone else.