ooogooo do you really need those rules? If you have apache "expires" module enabled on your origin server, Flarum will send a suggested cache time for each resource, and Cloudflare should follow the suggested values. Those suggested values are defined in https://github.com/flarum/flarum/blob/master/public/.htaccess#L33 and automatically exclude dynamic data.
If "cache all data" is an aggressive do-cache option, then what you show in your post would likely cache all frontend pages, meaning all users would see the same page. /api and all frontend pages (like /tags, /t/*, /settings, ...) would need to be excluded.
