The site you are reading. One Worker plays three roles — the public site, a secret-gated draft preview, and a rate-limited write path for the newsletter and contact forms — separated by assets-first routing rather than by hosts.
A decoupling gate runs before every ship: it proves that no public page can reach the CMS.
Built with
- Astro 7
- Cloudflare Workers
- Workers Builds + Deploy Hook
- Turnstile
- hand-rolled service worker