# Cloudflare Configuration Guide for Changemaker.lite

This guide will help you properly configure Cloudflare credentials for use with Changemaker.lite's production deployment.

## Finding Your Zone ID

The Zone ID is a unique identifier for your domain in Cloudflare.

1. Log in to the [Cloudflare Dashboard](https://dash.cloudflare.com)
2. Select your domain (e.g., cmlite.org)
3. On the right sidebar under "API", you'll see "Zone ID"
4. Copy this value - it should look something like: `1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p`

## Creating an API Token

You need an API token with proper permissions to manage DNS records and access policies.

1. Go to [Cloudflare Dashboard](https://dash.cloudflare.com) > Profile (top right) > API Tokens
2. Click "Create Token"
3. Use the "Edit zone DNS" template (or create a custom token)
4. For a custom token, ensure it has the following permissions:
   - Zone - DNS - Edit
   - Zone - Settings - Read
   - Account - Cloudflare Tunnel - Read
5. Under "Zone Resources", select "Include - Specific zone" and choose your domain
6. Create the token and copy its value

## Finding Your Account ID

The Account ID is needed for some Cloudflare Tunnel operations.

1. Go to the [Cloudflare Dashboard](https://dash.cloudflare.com)
2. Look at the URL when logged in - it will contain your account ID:
   `https://dash.cloudflare.com/1a2b3c4d5e6f7g8h9i0j/your-domain.com`
3. The string after `/dash.cloudflare.com/` is your Account ID (e.g., `1a2b3c4d5e6f7g8h9i0j`)

## Updating Your .env File

Update your `.env` file with these values: