A self-hosted blog and content management system built entirely on Cloudflare's edge platform. No external servers, no traditional databases, no third-party storage.

├── apps/
│   ├── worker/          Hono.js API (Workers)
│   ├── admin/           Admin panel (React + shadcn/ui + Tiptap)
│   └── frontend/        Public blog (React + Framer Motion)
├── packages/
│   ├── db/              Schema, migrations, seed
│   ├── shared/          Types, cache utilities
│   └── email/           Email templates
├── workers/
│   ├── image-processor/ Queue consumer
│   └── email-sender/    Queue consumer
├── wrangler.toml.example
└── turbo.json

• Node.js 20+
• pnpm 9+
• Wrangler CLI
• Cloudflare account (Workers Paid plan)

git clone https://github.com/springmusk026/CloudEdge.git
cd CloudEdge
cp wrangler.toml.example wrangler.toml
pnpm install

Create a D1 database and update wrangler.toml with the ID:

wrangler d1 create cloudedge-cms-db-dev

Run migrations and seed:

wrangler d1 execute cloudedge-cms-db-dev --local --file=packages/db/migrations/0000_init.sql

Start development servers:

pnpm dev

Copy wrangler.toml.example to wrangler.toml and fill in resource IDs. Secrets are set via wrangler secret put:

# Apply migrations to production D1
wrangler d1 migrations apply cloudedge-cms-db --remote

# Deploy worker
wrangler deploy

# Deploy frontend and admin (Cloudflare Pages)
wrangler pages deploy apps/frontend/dist --project-name=cloudedge-frontend
wrangler pages deploy apps/admin/dist --project-name=cloudedge-admin

CI/CD is configured in .github/workflows/ci-cd.yml — pushes to main auto-deploy.

All endpoints are under /api/v1/. Authentication uses Bearer tokens.

Public: GET /posts, GET /posts/:slug, GET /tags, GET /comments?postId=, POST /comments, POST /newsletter/subscribe

Auth: POST /auth/register, POST /auth/login, POST /auth/magic-link, GET /auth/me

Admin: Full CRUD for posts, tags, media, users, settings, newsletter campaigns, comments moderation.

AI: /ai/improve, /ai/excerpt, /ai/suggest-tags, /ai/search, /ai/alt-text

Feeds: /rss.xml, /feed.json, /sitemap.xml

• PBKDF2 for passwords — crypto.subtle is native in Workers; bcrypt requires WASM.
• Resend for email — MailChannels discontinued free Workers integration (Aug 2024).
• Durable Objects with Hibernation — WebSocket connections stay open without billing for idle time.
• KV rate limiting — Sliding window counters, no external dependencies.
• Analytics buffering — DO collects page views in memory, flushes to D1 every 60s to avoid write storms.
• R2 presigned uploads — Clients upload directly to R2, bypassing Worker memory limits.

See CONTRIBUTING.md.

See SECURITY.md.

Free for non-commercial use with attribution. Commercial use requires a license. See LICENSE.