Block non-cloudflare requests via htaccess

    # Check if specific Cloudflare header is missing
    RewriteCond %{HTTP:CF-RAY} ^$
    # Deny access
    RewriteRule ^ - [F]