Cloudflare Optimified

## Overview Cloudflare account managing the `optimified.com` DNS zone, proxy, and security settings. ## Account - **Account:** mike@optimified.com - **Plan:** Free - **Zone:** optimified.com ## DNS Records | Record | Type | Value | Proxy | |--------|------|-------|-------| | `comms.optimified.com` | CNAME | `docker-production-1879.up.railway.app` | Proxied | ## R2 Storage | Bucket | Purpose | API Token | |--------|---------|-----------| | `otf-mattermost` | Mattermost file storage | "otf-mattermost" (Admin Read & Write, scoped to bucket) | ## Configuration Rules | Rule | Scope | Setting | |------|-------|---------| | Browser Integrity Check OFF | `comms.optimified.com` | Disabled — required for Mattermost WebSocket connections | ## SSL/TLS - **Mode:** Full (Strict) - **Certificate:** Cloudflare Universal SSL ## Changelog - **2026-03-25:** Created account, added `optimified.com` zone - **2026-03-25:** Added CNAME for `comms.optimified.com` → Railway Mattermost - **2026-03-25:** Created R2 bucket `otf-mattermost` with scoped API token - **2026-03-25:** Added Configuration Rule: Browser Integrity Check OFF for `comms.optimified.com` (fix for WebSocket 403) - **2026-03-25:** Fixed SiteURL typo in Railway (`optimifed` → `optimified`)