Contribute private hub

IT / backend path

What Cloudflare does after someone opens a GitHub PR.

Pipeline

  1. GitHub event. Push/PR on the connected repo triggers Workers Builds.
  2. Build. Root Worker runs npm run build (Next static export → out/).
  3. Non-production branches. Deploy command is npx wrangler versions upload → preview URL only (does not overwrite production).
  4. Production (main). Deploy command is npx wrangler deploy → theworldandme.net.
  5. This hub. Separate Worker twam-contribute, root directory contribute/, Custom Domain contribute.theworldandme.net, protected with Cloudflare Access.

Architecture sketch

Do not attach contribute.theworldandme.net as a Custom Domain on the public Worker. Keep Access on this Worker only so the public site stays open.

Open full Archify publish workflow