Originally published at guushu.com/notes . I keep the original updated, so this copy may lag. I wrote this Cloudflare zone security checklist after "I'm sure I turned that on" led me to a WAF custom rule blocking curl/* on a zone I never set up that way. Twelve checks, each with a terminal command, so the answer is a number instead of a memory. By hand it takes about ten minutes per zone. Fine for one zone. The last section is about what happens with more. Set these once for the she...