mycfg.sh

A secure, ephemeral "dead drop" for configuration files.

Architecture

• Backend: Cloudflare Workers (Rust)
• Storage: Cloudflare Workers KV
• Frontend: PWA with terminal.css
• Security: Opaque 404s, Burn-After-Reading, X-CFG-Auth header

Security & Access Control

Public Access: By default, the service blocks raw uploads and only accepts validated types (otel, env). Private Mode: To restrict access to specific IP addresses (e.g., for a private demo), set the ALLOWED_IPS variable in worker/wrangler.toml:

[vars]
ALLOWED_IPS = "1.2.3.4, 2001:db8::1"

If this variable is set, any request from an IP not in the list receives 403 Forbidden.

Documentation & Planning

We follow an AI-Native development flow.

• Product Requirements (PRD)
• System Architecture
• User Stories
• Roadmap
• Lessons Learned