After purchase, Lumi creates a separate Cloudflare account for the domain and adds its zone. Login details are shown on the domain card.
Do not share the email, password, 2FA secret, or API key. They provide access to DNS and the website configuration.
Choose an SSL mode
With Flexible, an HTTP-to-HTTPS redirect at the origin often causes a redirect loop. Install a certificate on the server and switch to Full (strict). See the Cloudflare SSL documentation.
Security level
Low or Medium is enough for normal traffic. Use High or Under Attack during an actual attack. Stricter checks may inconvenience some legitimate visitors.
Create a redirect
Go to Cloudflare settings → Redirects → Add and send only the destination hostname, such as target.com.
The bot redirect:
- uses status code 301;
- covers the root domain and subdomains;
- preserves the path and query string;
- always sends visitors to HTTPS.
Example: example.com/catalog?id=1 redirects to https://target.com/catalog?id=1.
When to purge cache
Tap Purge cache if the server already has a new site version but visitors still see old content. This action does not clear DNS caches.
What happens after changing nameservers
External nameservers stop Lumi Cloudflare from serving the domain. SSL, security, DNS, and redirect settings in the bot no longer apply. To restore them, open any of those sections and confirm the automatic Cloudflare reconnect.
Errors 521, 522, 525, and 526 are covered in the troubleshooting checklist. 