Anonymous41 can you describe your hosting setup?
Are you certain the DDOS went through Cloudflare, or was your IP leaked and your server targeted directly?
Many hosting companies provide their own DDOS protection, maybe you can simply toggle a switch to get access to this feature.