Cloudflare Pages for marketing, direct ingress for workloads

The public website should be static, cached, and globally fast. API gateways, tunnels, WireGuard, and Mac fleet routing should stay on controlled edge infrastructure, either a VPS or an isolated edge VM on owned servers.

Cloudflare Pages

  • Landing pages, SEO pages, pricing, docs, waitlist forms.
  • Fast global cache and simple rollback.
  • No customer secrets or machine credentials.