📝 (README.md): Update Worker setup instructions to clarify deployment process with Click To Deploy and Wrangler CLI

📝 (README.md): Add detailed steps for creating API tokens for UniFi client DDNS updates
📝 (README.md): Update UniFi OS configuration section to provide clearer instructions for setting up Dynamic DNS
📝 (README.md): Update section headers for consistency and clarity in the README file

Author: MatthewA1

README.md

@@ -6,32 +6,53 @@ A Cloudflare Worker script that provides a UniFi-compatible DDNS API to dynamica
 
 UniFi Dream Machine Pro (UDM-Pro) or UniFi Security Gateway (USG) users may need to update Cloudflare domain name DNS records when their public IP address changes. UniFi does not natively support Cloudflare as a DDNS provider.
 
-### Configuring Cloudflare
+## Configuring Cloudflare
 
 Ensure you have a Cloudflare account and your domain is configured to point to Cloudflare nameservers.
 
-#### Install With Click To Deploy
+### Worker Setup
+
+#### Deploy With Click To Deploy
 
 1. Deploy the Worker: [![Deploy to Cloudflare Workers](https://deploy.workers.cloudflare.com/button)](https://deploy.workers.cloudflare.com/?url=https://github.com/workerforce/unifi-ddns)
 2. Navigate to the Cloudflare Workers dashboard.
 3. After deployment, note the `\*.workers.dev` route.
-4. Create an API token to update DNS records: 
-   - Go to https://dash.cloudflare.com/profile/api-tokens.
-   - Click "Create token", select "Create Custom Token".
-   - Choose "Edit Cloudflare Workers" Template
-   - Select "+Add More"
-   - Choose **Zone:DNS:Edit** for permissions, and include your zone under "Zone Resources". 
-   - Copy your API Key for later use in UniFi OS Controller configuration.
 
-#### Install With Wrangler CLI
+#### Deploy With Wrangler CLI
 
 1. Clone or download this project.
 2. Ensure you have [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/install-and-update/) installed.
 3. Log in with Wrangler and run `wrangler deploy`.
 4. Note the `\*.workers.dev` route after creation.
-5. Create an API token as described above.
 
-### Configuring UniFi OS
+### API Token for DNS Record Updates
+An API Token will be needed for each UniFi client performing DDNS updates.
+To create the token(s):
+1. Tokens can now be created at the user level or account level
+
+   User token:  
+   - Go to https://dash.cloudflare.com/profile/api-tokens
+   - Key differences:
+     - Access to all accounts for which the user is a member and has permissions (unless explicitly limited in token settings)
+     - Actions performed by this token are associated with the user
+     - Viewable/Editable only by the creating user
+
+   Account token: (Recommended)
+   - On the [CloudFlare Dashboard](https://dash.cloudflare.com/), open the account which manages the target zone(s)
+   - Select Manage Account > Account API Tokens 
+   - Key differences:
+     - Access limited to only the account for which it is created
+     - Actions performed by this token are not attributed to a user
+     - Viewable/Editable by all account members (with the appropriate permissions)
+2. Click "Create Token"
+3. Click "Use Template" for "Edit zone DNS"
+4. Under "Zone Resources," include the target zone or select "All zones from an account."
+   (If using a user token, "All zones" is also an option.)  
+   Set a token name and/or additional restrictions as desired.
+5. Click "Continue to summary" then "Create Token."  
+   Copy and save the generated token for later use configuring the UniFi OS Controller.
+
+## Configuring UniFi OS
 
 1. Log in to your [UniFi OS Controller](https://unifi.ui.com/).
 2. Navigate to Settings > Internet > WAN and scroll down to **Dynamic DNS**.
@@ -44,7 +65,7 @@ Ensure you have a Cloudflare account and your domain is configured to point to C
      - For older UniFi devices, omit the URL path.
      - Remove `https://` from the URL.
 
-#### Testing Changes - UDM-Pro
+### Testing Changes - UDM-Pro
 To test the configuration and force an update on a UDM-Pro:
 
 1. SSH into your UniFi device.
@@ -53,7 +74,7 @@ To test the configuration and force an update on a UDM-Pro:
 4. Run `inadyn -n -1 --force -f <config-path>` (e.g., `inadyn -n -1 --force -f /run/ddns-eth4-inadyn.conf`).
 5. Check `/var/log/messages` for related error messages.
 
-#### Testing Changes - USG
+### Testing Changes - USG
 To test the configuration and force an update on a USG:
 
 1. SSH into your USG device.
@@ -62,7 +83,7 @@ To test the configuration and force an update on a USG:
 4. Run `sudo ddclient -daemon=0 -verbose -noquiet -debug -file /etc/ddclient/<config>.conf` (e.g., `sudo ddclient -daemon=0 -verbose -noquiet -debug -file /etc/ddclient/ddclient_eth0.conf`).
 5. This should output `SUCCESS` when the DNS record is set.
 
-#### Important Notes!
+### Important Notes!
 
 - For subdomains (`sub.example.com`), create an A record manually in Cloudflare dashboard first.
 - If you encounter a hostname resolution error (`inadyn[2173778]: Failed resolving hostname https: Name or service not known`), remove `https://` from the `Server` field.