Skip to main content

Connecting Cloudflare R2

This guide walks you through connecting a Cloudflare R2 storage destination to Pluton.

Prerequisites​

Before connecting Cloudflare R2, you need:

  1. A Cloudflare account - Sign up here
  2. R2 enabled on your Cloudflare account
  3. An R2 API token with read/write permissions

Getting Your R2 Credentials​

Step 1: Enable R2 Storage​

  1. Log into the Cloudflare dashboard
  2. Select R2 Object Storage from the left sidebar
  3. If prompted, complete the R2 setup process

Step 2: Create an R2 API Token​

  1. In the R2 overview page, click Manage R2 API Tokens
  2. Click Create API Token
  3. Give your token a descriptive name (e.g., "Pluton Backups")
  4. Set permissions to Object Read & Write
  5. Optionally restrict the token to specific buckets
  6. Click Create API Token
  7. Important: Copy the Access Key ID and Secret Access Key immediately — they are shown only once

Step 3: Note Your Account ID​

  1. Your Account ID is displayed in the Cloudflare dashboard URL or on the R2 overview page
  2. Copy this value — Pluton uses it to generate the R2 endpoint automatically

Connecting to Pluton​

Pluton Cloudflare R2

Step 1: Add Storage​

  1. In Pluton, navigate to Storages
  2. Click Add Storage button
  3. Select Cloudflare R2 from the provider list

Step 2: Configure Connection​

Fill in the required fields:

  • Storage Name: A friendly name (e.g., "R2 Production Backups")
  • Access Key ID: Your R2 Access Key ID from the API token
  • Secret Access Key: Your R2 Secret Access Key (password)
  • Account ID: Your Cloudflare Account ID, used to generate the R2 endpoint

Step 3: Advanced Options (Optional)​

Additional settings available:

  • Server-side Encryption: Choose AES256 or KMS encryption for data at rest
  • Storage Class: Select the storage tier for your objects
  • Chunk Size: Adjust the chunk size for multipart uploads (default: 5 MiB)
  • Upload Cutoff: Set the threshold for switching to chunked uploads (default: 200 MiB)
  • Disable Checksum: Skip MD5 checksum storage for faster uploads

Step 4: Test and Save​

  1. Click Test Connection to verify credentials
  2. If successful, click Save
  3. Your Cloudflare R2 storage is now ready for backup plans

Common Issues​

Invalid Account ID: Ensure you're using the Cloudflare Account ID (found on the R2 overview page), not your email or Zone ID.

Access Denied: Verify your API token has Object Read & Write permissions and is not restricted to a different bucket.

Token Shown Only Once: If you lost your Secret Access Key, delete the token and create a new one from the R2 API Tokens page.

Best Practices​

  • Use dedicated API tokens with minimum required permissions for Pluton
  • R2 offers free egress — a cost-effective choice for backups that need frequent restores
  • Enable bucket lifecycle rules to automatically clean up old data
  • Consider using separate buckets for different backup plans for easier management