The org/cloudflare/ Terraform root manages the stormtrust.net zone, stable
Worker identities, and durable storage. Its state uses the
stormtrust/cloudflare.tfstate key in Cloudflare R2.
Application directories contain Wrangler configuration. Wrangler owns code, assets, bindings, deployments, custom domains, routes, and deploy-time observability.
The trusted main workflow applies Terraform before it runs Wrangler. This
order creates durable resources before an application references them.
Cloudflare jobs receive the Cloudflare token. They do not receive the GitHub organization provider token.
| Intent | Start here |
|---|---|
| Tutorial | Build your first Worker |
| How-to | Catalog and connect an app |
| How-to | Deploy a change |
| How-to | Recover a release |
| Explanation | Terraform and Wrangler ownership |
| Reference | State and drift |