Notes
Production notes from building small web products on Cloudflare: incidents, fixes and setups that actually happened.
- Cloudflare zone security checklist: 12 read-only checks, one curl each A Cloudflare zone security checklist of 12 read-only checks, TLS to audit log, each with the curl or dig that verifies it. About 10 minutes per zone by hand.
- Cloudflare Email Worker inbox: store every message in D1 in 30 lines A Cloudflare Email Worker inbox in about 30 lines of TypeScript: the email() handler, D1 schema, wrangler config, and 3 self-hosted inboxes built the same way.
- Cloudflare Email Routing vs Google Workspace vs Zoho for support@ Cloudflare Email Routing vs Google Workspace vs Zoho vs a self-hosted Worker inbox in one table: what each stores, who can reply as support@, cost for 2 people.
- Cloudflare Email Routing support address: setup and 3 limits Set up a Cloudflare Email Routing support address in 10 minutes for $0, then the 3 limits you hit next: no mailbox, no shared handling, no replying later.
- Why Cloudflare bills spike: 8 D1 and Durable Objects cases from 2026 Eight Cloudflare bill spikes from 2026, seven on D1 rows read and one Durable Objects alarm loop: what moved, how far, and where to see it before the invoice.