# Cloudflare


<!-- Code generated by gen-dns-providers; DO NOT EDIT. -->

Configuration for the [Cloudflare](https://www.cloudflare.com/dns/) DNS provider.

See the [lego documentation](https://go-acme.github.io/lego/dns/cloudflare/) for full details.

```yaml
letsEncrypt:
  dnsProvider: "cloudflare"
  dnsCredentials:
    # CF_API_EMAIL: Account email
    apiEmail: ""
    # CF_API_KEY: API key
    apiKey: ""
    # CF_DNS_API_TOKEN: API token with DNS:Edit permission (since v3.1.0)
    dnsAPIToken: ""
    # CF_ZONE_API_TOKEN: API token with Zone:Read permission (since v3.1.0)
    zoneAPIToken: ""
    # CLOUDFLARE_BASE_URL: API base URL (Default: https://api.cloudflare.com/client/v4)
    baseURL: ""
    # CLOUDFLARE_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
    pollingInterval: ""
    # CLOUDFLARE_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
    propagationTimeout: ""
    # CLOUDFLARE_TTL: The TTL of the TXT record used for the DNS challenge in seconds (Default: 120)
    ttl: ""
```

Credentials are passed directly to lego using strong types and are never written to the process environment.
You may also use the raw lego environment-variable names (and documented aliases) as keys instead of the normalized names.