Deploy to Cloudflare Pages

Cloudflare Pages offers fast, global static site hosting with unlimited bandwidth.

Quick Deploy

1. Go to Cloudflare Pages
2. Click "Create a project"
3. Connect your GitHub repository

Build Configuration

Setting	Value
Framework preset	None
Build command	npm run build
Build output directory	dist
Root directory	/

Environment Variables

Add these in Settings → Environment variables:

Variable	Value
NODE_VERSION	18
SIMPLE_MODE	false (optional)

Configuration File

Create _headers in your public folder:

# Cache WASM files aggressively
/*.wasm
  Cache-Control: public, max-age=31536000, immutable
  Content-Type: application/wasm

# Service worker
/sw.js
  Cache-Control: no-cache

Create _redirects for SPA routing:

/*    /index.html   200

Custom Domain

1. Go to your Pages project
2. Click "Custom domains"
3. Add your domain
4. Cloudflare will auto-configure DNS if the domain is on Cloudflare

Advantages

• Free unlimited bandwidth
• Global CDN with 300+ edge locations
• Automatic HTTPS
• Preview deployments for pull requests
• Fast builds

Troubleshooting

Large File Uploads

Cloudflare Pages supports files up to 25 MB. WASM modules should be fine, but if you hit limits, consider:

# Split large files during build
npm run build

Worker Size Limits

If using Cloudflare Workers for advanced routing, note the 1 MB limit for free plans.

CORS Proxy Worker (For Digital Signatures)

The Digital Signature tool requires a CORS proxy to fetch certificate chains. Deploy the included worker:

cd cloudflare
npx wrangler login
npx wrangler deploy

Security Features

Feature	Description
URL Restrictions	Only certificate URLs allowed
File Size Limit	Max 10MB per request
Rate Limiting	60 req/IP/min (requires KV)
Private IP Blocking	Blocks localhost, internal IPs

Enable Rate Limiting

# Create KV namespace
npx wrangler kv namespace create "RATE_LIMIT_KV"

# Add to wrangler.toml with returned ID:
# [[kv_namespaces]]
# binding = "RATE_LIMIT_KV"
# id = "YOUR_ID"

npx wrangler deploy

Build with Proxy URL

VITE_CORS_PROXY_URL=https://your-worker.workers.dev npm run build

Note: See README for HMAC signature setup.