Public

A placeholder, but a well-built one.

There isn't much here yet. What there is: a static site on Cloudflare's edge, a private area that turns strangers away before their request reaches the server, and every piece of it defined in Terraform rather than clicked into existence.

What's underneath

The pages are Astro, built to plain HTML and served by a Cloudflare Worker. DNS, the zone, and the access policy live in Terraform, with state in S3 and changes applied by GitHub Actions on merge. The domain is registered in Route 53 and delegates its nameservers to Cloudflare.

Nothing was created by hand in a console, which means the whole thing can be destroyed and rebuilt from the repository.

The private half

/private is gated by Cloudflare Access. Requests to it are stopped at the edge and never reach this site unless the visitor has proven they're on the allowlist, so there's no login form here and no session for this site to get wrong.