Two homes: the account's workers.dev address, and the custom domain hooks.lmjtfy.fun, whose DNS record a Workers custom domain creates on deploy (as it does for lmjtfy.fun and whiskers.lmjtfy.fun). Any address but the canonical one sends a reader on to it (src/lib.rs, gate). The canonical one comes from SITE_ORIGIN, which the deploy passes, so this file carries no account name.

10workers_dev = true
11preview_urls = false
12routes = [{ pattern = "hooks.lmjtfy.fun", custom_domain = true }]

The link preview's card and the Worker (tools/build-web.sh). Runs from this directory.

16command = "../tools/build-web.sh"
17watch_dir = ["src", "../third-party/jevcrates/jev-ui", "../plugin/hooks", "../crates/jevhooks-daemon/src"]

The link preview's card, built into public/preview/. The Worker runs first for it, so the address gate and the security headers apply to it like everything else.

21[assets]
22directory = "./public"
23binding = "ASSETS"
24run_worker_first = ["/preview/*"]

Where the site is, for the link preview's absolute addresses and the address gate.

28SITE_ORIGIN = "http://localhost:8790" # production: https://hooks.lmjtfy.fun, passed at deploy

Cloudflare's own record of what the Worker did. Invocation logs are off: they record each request, and this site writes no visitor down. The Worker's own lines (src/log.rs) carry a route, a method, a status and a time, and nothing else.

33[observability]
34enabled = true