0 Fork 0

Files

T

tianma-if b94903fb52 feat: add instance-level S3-compatible object storage

Let instance owners route new uploads to an external OSS while keeping
existing attachments on their original store. Secrets are encrypted with
EDGE_EVER_STORAGE_ENCRYPTION_KEY before being stored in D1.

2026-08-05 12:27:10 +08:00

2.9 KiB

Raw Blame History

Cloudflare Manual Deployment and Recovery

Use this page for advanced configuration, troubleshooting, and emergency recovery. Most users should use Deploy EdgeEver online from a Fork; AI Agents should use AI Agent Cloudflare Deployment.

First manual deployment

Fork the repository and clone it locally.
Install Node.js 22+ and Bun.

Initialize configuration and Cloudflare resources:

cp .env.local.example .env.local
bun install
EDGE_EVER_PASSWORD='<initial password>' bun run deploy:setup
bun run deploy:doctor
bun run deploy:manual

deploy:setup creates or reuses D1 and R2 and writes configuration to the git-ignored .env.local. Without EDGE_EVER_PASSWORD, the default login is admin / admin123.

After deployment, confirm:

/api/health returns 200 with "ok": true
/api/openapi.json is reachable
admin can log in

Create resources manually

cp .env.local.example .env.local
bun install
bunx wrangler d1 create edgeever
bunx wrangler r2 bucket create edgeever-resources

Write the returned D1 ID and resource names to .env.local:

EDGE_EVER_D1_DATABASE_ID=<database_id>
EDGE_EVER_R2_BUCKET_NAME=edgeever-resources
EDGE_EVER_AUTH_USERNAME=admin
EDGE_EVER_AUTH_PASSWORD=<strong password>
EDGE_EVER_SESSION_TTL_DAYS=400
# Optional portable application-level login protection. These also work with Docker + SQLite.
EDGE_EVER_AUTH_LOGIN_WINDOW_SECONDS=900
EDGE_EVER_AUTH_LOGIN_USERNAME_MAX_ATTEMPTS=5
EDGE_EVER_AUTH_LOGIN_USERNAME_COOLDOWN_SECONDS=900
EDGE_EVER_AUTH_LOGIN_IP_MAX_ATTEMPTS=30
EDGE_EVER_AUTH_LOGIN_IP_COOLDOWN_SECONDS=300

Then run:

bun run deploy:doctor
bun run deploy:manual

Do not commit .env.local or write passwords to D1.

Enable third-party OSS settings

To configure an S3-compatible object store from Settings → Advanced, add a stable encryption secret to the deployed Worker:

bunx wrangler secret put EDGE_EVER_STORAGE_ENCRYPTION_KEY

Use a random value of at least 32 characters and keep a secure backup. EdgeEver encrypts the external Secret Access Key before storing it in D1. Losing or changing this encryption key makes previously saved external credentials unusable. After adding the secret, redeploy or restart the Worker, then use Test connection before saving the OSS configuration.

Recovery

Database not ready: confirm the D1 binding is DB, then run bun run deploy:manual.
Authentication not configured: set EDGE_EVER_AUTH_PASSWORD in .env.local, then redeploy.

Forgotten admin password:

EDGE_EVER_PASSWORD='<new password>' bun run auth:reset-password -- --remote --username admin

Automatic updates

After manual deployment, configure Cloudflare Workers Builds and enable Update deployed EdgeEver in the Fork's Actions.

2.9 KiB Raw Blame History