Automatic WAF Setup for SSL Certificate Renewal
SSL certificate renewal needed? Notis creates a Cloudflare WAF list for validation traffic. Certificate processes no longer require manual WAF work.
Trigger
Issue Created Trigger
Triggered when a new issue is created.
Action
Create WAF List
Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")
Why this helps
SSL certificate renewals require temporary WAF rule adjustments in Cloudflare, but these manual steps get skipped, causing renewal failures.
- Certificate validation traffic is automatically allowed
- Renewal failures drop to zero
- Clear audit trail of certificate lifecycle in Linear
- Reduces manual certificate renewal steps
Setup
Build it in a few focused steps.
- 1Connect Linear and Cloudflare to Notis.
- 2Tell Notis: 'When an issue is created with the ssl-renewal label, create a WAF list in Cloudflare named after the domain to allow certificate validation.' Use Issue Created as the trigger.
- 3Create and use an 'ssl-renewal' label for certificate renewal issues.
- 4Test by creating an SSL renewal issue and confirming Notis creates the WAF list in Cloudflare.
Questions about this workflow
How long should the WAF list allow validation traffic?
You specify during setup. For example: 'Keep the list active for 7 days, then ask for manual review.'
What IPs should be in the validation WAF list?
Notis can pre-populate with common certificate provider IPs (e.g., Let's Encrypt). Tell it during setup.
Can I automatically remove the WAF list after validation?
Yes. Create a second automation: 'When the SSL renewal issue is closed, delete the WAF list.'
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Linear to Cloudflare. A trigger fires from one place; an action lands in another.
Linear triggers
Cloudflare actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create DNS record
Tool to create a new dns record within a specific zone. use after obtaining the zone id to programmatically add dns entries.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Create WAF List
Tool to create a new empty waf list for the account. use after confirming the account id. example: create list(account id="<id>", kind="ip", name="blocklist")
Comment Received Trigger
Triggered when a comment is received.
Create Zone
Tool to create a new zone. use after confirming account id when adding a domain to cloudflare.
Issue Created Trigger
Triggered when a new issue is created.
Delete DNS Record
Tool to delete a dns record within a specific zone. use after confirming zone and record ids. example: "delete dns record 372e6795... from zone 023e105f4ecef..."
Issue Updated Trigger
Triggered when an issue is updated. For example labels are changed, issue status is changed, etc.
Delete WAF List
Tool to delete a waf list. use when you need to remove a list after verifying no filters reference it. example: delete list(account id="<account id>", list id="<list id>")
Private Team Comment Created
Fires when a new comment is posted on an issue in a private Linear team (polled with the connected user's token).
Delete Zone
Tool to delete a zone. use after confirming the zone identifier to permanently remove a dns zone from your cloudflare account. example: delete zone(zone identifier="023e105f4ecef8ad9ca31a8372d0c353")
Private Team Issue Created
Fires when a new issue appears in a private Linear team (polled with the connected user's token).
List WAF Lists
Tool to fetch all waf lists (no items) for an account. use after confirming account id.
Private Team Issue Properties Updated
Fires when properties on an issue change in a private Linear team (polled with the connected user's token).
List Account Members
Tool to list members of a given cloudflare account. use after confirming the account id.
Connect any two apps with Notis in the middle.
Linear and Cloudflare, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Cloudflare.