This deployment connected Windows AD → authentik → the Cloudflare dashboard. A domain user signed into authentik and launched Cloudflare from an application card. The last obstacle was the card’s URL: the ordinary dashboard homepage was a bookmark, not an entry point into this SSO flow.

The September 16, 2026 record uses authentik 2026.8.2, two writable DCs, and a cloud RODC. The user confirmed the complete dashboard login. Domains below are examples; no passwords or client secrets are included.

The blog was originally hosted on GitHub Pages, accessed through Cloudflare CDN. This migration moves build output directly to Cloudflare Pages, eliminating the GitHub Pages middle layer for faster edge delivery and better cache control. A blue-green deployment strategy ensures zero-downtime migration.

The blog domain is proxied through Cloudflare with GitHub Pages as the origin. To improve static asset delivery and reduce redundant origin fetches, a Cache Rule was configured in the Cloudflare Dashboard to cache build artifacts, images, icons, and fonts at the edge.