Cloudflare

Production AI Mentor di-host di Cloudflare Workers (app.sertifikasitrainer.com). Cloudflare juga menyediakan R2 (file storage) dan Hyperdrive (koneksi Postgres ke Neon).

Dashboard: dash.cloudflare.com
Docs: developers.cloudflare.com

Apa yang dipakai di project ini

Produk	Fungsi di AI Mentor
Workers	API Hono + static web + renderer
R2	Upload dokumen, foto trainer, asset
Hyperdrive	Pool koneksi ke Neon Postgres
DNS	`app.`, `docs.`, `assets.` subdomain

Config Wrangler: apps/api/wrangler.jsonc, apps/web/wrangler.jsonc

1. Buat API token (deploy & CI)

Buka API Tokens

Dashboard → My Profile → API Tokens → Create Token

Pilih template atau custom

Untuk deploy script, permission minimal:

Account → Workers Scripts → Edit
Account → Workers R2 Storage → Edit
Account → Workers KV → Edit (jika dipakai)
Account → Hyperdrive → Edit
Zone → Workers Routes → Edit (custom domain)

Simpan ke env

# Untuk ./thub deploy / wrangler lokal
CLOUDFLARE_API_TOKEN=...
CLOUDFLARE_ACCOUNT_ID=...   # Dashboard → Workers → Overview (sidebar kanan)

Untuk GitHub Actions: simpan sebagai repository secrets (lihat CI/CD).

2. Workers & custom domain

Deploy via ./thub deploy atau scripts/deploy-prod.sh:

Build frontend (apps/web)
Deploy worker API + web + renderer
Route app.sertifikasitrainer.com → worker

URL production (FRONTEND_URL, BETTER_AUTH_URL, dll.) sudah di vars pada wrangler.jsonc — bukan secret.

3. R2 object storage

R2 kompatibel S3. Project memakai AWS SDK dengan endpoint R2.

Aktifkan R2

Dashboard → R2 → Overview → buat bucket (mis. trainerhub)

Buat API token R2

R2 → Manage R2 API Tokens → Create token
Permission: Object Read & Write (scope ke bucket jika perlu)

Isi .env

AWS_ACCESS_KEY_ID=<Access Key ID dari token>
AWS_SECRET_ACCESS_KEY=<Secret Access Key>
AWS_REGION=auto
AWS_S3_BUCKET=trainerhub
AWS_S3_ENDPOINT=https://<ACCOUNT_ID>.r2.cloudflarestorage.com
R2_PUBLIC_URL=https://assets.sertifikasitrainer.com

Public access (opsional)

Jika asset harus diakses browser langsung, aktifkan custom domain R2 atau public bucket policy. Docs: R2 public buckets.

4. Hyperdrive (Neon)

Hyperdrive mem-pool koneksi Postgres dari Worker ke Neon.

Buat Hyperdrive config

npx wrangler hyperdrive create trainerhub-neon \
  --connection-string="postgresql://user:pass@ep-xxx.neon.tech/db?sslmode=require"

Atau lewat Dashboard → Hyperdrive → Create configuration.

Binding di wrangler

ID Hyperdrive masuk ke hyperdrive binding di apps/api/wrangler.jsonc.

Sync saat deploy

Script deploy dengan SYNC_HYPERDRIVE=1 (default) mencoba sync connection string dari merged env.

Docs: Hyperdrive getting started

5. Wrangler CLI lokal

bun add -g wrangler   # atau npx wrangler
wrangler login        # alternatif: CLOUDFLARE_API_TOKEN
wrangler whoami

Troubleshooting

Masalah	Solusi
Deploy 403	Token kurang permission Workers/R2
Upload gagal 413	Nginx/client body limit — backend cap `MAX_FILE_SIZE_MB`
DB timeout di Worker	Cek Hyperdrive binding + `DATABASE_URL` Neon pooled
Secret tidak ke Worker	`./thub secrets push` setelah `./thub env merge --prod`

Mulai

Panduan

AI & Dokumen

Layanan eksternal

Arsitektur

Apa yang dipakai di project ini

1. Buat API token (deploy & CI)

2. Workers & custom domain

3. R2 object storage

4. Hyperdrive (Neon)

5. Wrangler CLI lokal

Troubleshooting

​Apa yang dipakai di project ini

​1. Buat API token (deploy & CI)

​2. Workers & custom domain

​3. R2 object storage

​4. Hyperdrive (Neon)

​5. Wrangler CLI lokal

​Troubleshooting

Apa yang dipakai di project ini

1. Buat API token (deploy & CI)

2. Workers & custom domain

3. R2 object storage

4. Hyperdrive (Neon)

5. Wrangler CLI lokal

Troubleshooting