DNSSEC, TLS, WAF, static assets
CASE STUDY 001 / CLOUDFLARE FREE
Personal cloud.
Production discipline.
A minimal edge platform that treats identity, private connectivity and recovery as one engineered system. No public home origin. No fake green status.
Access bootstrap, Pocket ID gated
No connector, no routes
SYSTEM / TRUST BOUNDARIES
PUBLICWorker Static Assetslab.prochal.pl
HTTPS / WAF
CONTROL PLANECloudflare EdgeDNS · Access · Gateway
OUTBOUND ONLY
PRIVATEHome Infrastructurenot published
PLATFORM / ADMISSION RULE
Every service must earn its place.
No product is enabled for a checkbox. Each component requires a real workload, an owner, an acceptance test and a teardown path.
- Public surface
- Worker Static Assets
- Private portal
- Access + JWT verification
- Data / events
- Not provisioned
- Identity target
- Pocket ID, gated
- Private network
- Tunnel staged, no routes
- Cost posture
- Free-plan baseline, monitored