This package implements the libdns interfaces for Cloudflare.

There are two approaches for token permissions supported by this package:

1. Single token for everything
   • APIToken permissions required: Zone:Read, Zone.DNS:Write - All zones
2. Dual token method
   • ZoneToken permissions required: Zone:Read - All zones
   • APIToken permissions required: Zone.DNS:Write - for the zone(s) you wish to manage

The dual token method allows users who have multiple DNS zones in their Cloudflare account to restrict which zones the token can access, whereas the first method will allow access to all DNS Zones. If you only have one domain/zone then this approach does not provide any benefit, and you might as well just have the single API token

To use the dual token approach simply ensure that the ZoneToken property is provided - otherwise the package will use APIToken for all API requests.

To clarify, do NOT use API keys, which are globally-scoped:

DO use scoped API tokens: