(http.host eq "xxxxx" and not http.request.uri.path in {"/" "/api/clients" "/api/me" "/api/version" "/api/nodes" "/api/public" "/manifest.json" "/favicon.ico" "/registerSW.js"} and not starts_with(http.request.uri.path, "/assets/") and not starts_with(http.request.uri.path, "/api/recent/") and not starts_with(http.request.uri.path, "/api/records/ping") and not starts_with(http.request.uri.path, "/instance/") and not starts_with(http.request.uri.path, "/api/records/load"))

此类东西 我向来是 前后分离 一个域名只展示 后台只在另一个域名。
以上是适用于展示的CF规则。