With the recent willingness of the US Government to pressure its tech agencies into revealing user data without a proper judicial warrant, we’ve decided it’s overdue for us migrate away from Cloudflare.
We’ll be transitioning our sites over to https://deflect.ca/ over the next week or so, starting with pixelfed first before doing lemmy and piefed.
I hope to be able to do this without any noticeable downtime, but it is a major config change that will require some backend changes as well. I’ll make an announcement before/after and you can always check https://status.fedecan.ca/

You might be able to get away with not having any CDN on PieFed at all - https://join.piefed.social/2025/11/22/reducing-piefeds-dependence-on-cloudflare/
A few weeks back I went through and made sure the Cache-Control headers are being set right so nginx can do a good job of caching.
I’m caching less to keep the load off piefed, and more to keep the load off our network connection and improve performance for users. Unfortunately nginx won’t help with that. Also though I know it’s trivial to get our origin IP if you’re determined, it helps avoid the casual ddos attacks.