Deploy - Plume

The same codebase runs two ways. Cloudflare Workers with D1 is the cheapest; Docker with SQLite runs anywhere.

Cloudflare Workers

Free tier costs nothing to run: 100k requests/day, 5 million D1 rows read/day, 100k rows written/day, and 5 GB of storage.

Create the database

npx wrangler d1 create cms

Paste the printed database_id into wrangler.toml.

Set secrets

npx wrangler secret put JWT_SECRET      # random, 16+ chars
npx wrangler secret put SETUP_TOKEN     # guards one-time setup
npx wrangler secret put KEYGEN_PASSWORD # optional: enables /keygen

Deploy

npx wrangler deploy

The database schema migrates automatically on the first request.

Mark filterable fields as indexed. An unindexed filter scans a whole type and burns your daily rows-read budget.

Docker

For any VPS. One volume holds the SQLite database.

docker build -t cms .
docker run -d -p 3000:3000 -v cms-data:/data \
  -e JWT_SECRET=$(openssl rand -hex 32) \
  -e SETUP_TOKEN=$(openssl rand -hex 16) \
  cms

Configuration is via environment variables: JWT_SECRET (required), SETUP_TOKEN, KEYGEN_PASSWORD, DATABASE_PATH (default /data/cms.db), and PORT (default 3000).

For off-site backups on a VPS, add a Litestream sidecar that streams the SQLite file to any S3-compatible bucket.

Authentication

​Cloudflare Workers

​Docker

Cloudflare Workers

Docker