Deploy overview (operators)

Public, operator-safe topology. Never publish API tokens, passwords, or secret values in docs or chat.

Surfaces

Role	Worker	Routes
Product DMS	`flashfender-dms`	`app.flashfender.com/*`
Marketing + docs	`flashfender-web`	`flashfender.com/`, `www.flashfender.com/`

Cloudflare account for production FlashFender: the operator’s production account (see internal continuity handoff). Do not deploy production to unrelated OAuth accounts.

Marketing package

Path: websites/flashfender.com
Stack: Astro 7 + Cloudflare adapter
Docs: Astro Starlight under /docs
Deploy: npm run deploy from the marketing package (build + wrangler deploy)

App package

Next.js App Router + OpenNext on Cloudflare Workers
Deploy via the app’s deploy:cf script (operators only)

Environment

App origin / PUBLIC_APP_ORIGIN: https://app.flashfender.com
Marketing trial/login CTAs deep-link to the app — they do not host auth

Secrets

Secret names and values live in the private continuity companion file (gitignored). This public doc intentionally omits them.