Cloudflare integration for nginx reverse proxies
ShieldProxy does not run a shared Cloudflare account. Each admin connects their own OAuth or API token so the panel can drive a DMCA-ignore reverse-proxy path: proxied DNS to the nginx shield, Origin CA for Full (Strict), and clean teardown when domains leave.
OAuth or API token
OAuth is convenient when you connect from the browser.
API tokens suit tighter scopes for DNS and certificate work when you prefer token-based access.
Use Disconnect when you want to revoke access cleanly.
What the connection is used for
Looking up zones and pointing proxied records at the shield.
Issuing Origin CA material for the Cloudflare→shield hop when you add domains.
Cleaning up proxy DNS records the panel created when a domain is removed—not rewriting your whole zone.
Keep reading
- Cloudflare Origin CA and Full (Strict) for Nginx ShieldsCloudflare Origin CA + Full (Strict) TLS on an nginx reverse-proxy shield—why it matters and how ShieldProxy issues certs on the VPS.
- Cloudflare Only vs DMCA-Ignore Reverse ProxyCloudflare-only origin hiding vs ShieldProxy’s Cloudflare + nginx reverse-proxy shield—when orange-cloud is enough and when DMCA-ignore reverse-proxy setups need the extra hop.
- Hide Origin IP with Cloudflare + Nginx Reverse ProxyHide your origin IP behind Cloudflare and an nginx reverse-proxy shield—for DMCA Ignored Hosting and Offshore Hosting setups. What leaks, what to lock, what ShieldProxy automates.
- Fully Managed vs Self-Managed Reverse Proxy PlansShieldProxy Fully Managed vs Self-Managed: same DMCA-ignore reverse-proxy panel; different who owns the nginx shield VPS—and who can add team users.
Explore topics
- GuidesDMCA-ignore reverse proxy, DMCA-ignore VPS vs shield, nginx hide origin IP, Cloudflare Origin CA—for Offshore and Self-Managed setups.
- Use casesStreaming DMCA-ignore reverse proxies, multi-domain nginx shields, hide origin IP, Fully Managed vs Self-Managed plans.
- CompareCloudflare-only vs DMCA-ignore reverse proxy, and DIY nginx reverse proxy vs ShieldProxy automation.