Cloud Hosting Expert

Cloud Hosting Expert (2026 Edition)

English | Bahasa Indonesia

English

Orchestration & Integration

• Upstream & Orchestration: zero-to-prod-orchestrator (Phase 7 deployment), brainstorming, session-memory-manager.
• CI/CD & Container Pipelines: ci-cd-devops-architect (deployment automation), github-actions-expert (cloud actions & OIDC), docker-container-expert (container images for Railway/Fly).
• Edge Compute & Serverless: cloudflare-workers-expert (Cloudflare Workers, D1, KV, R2), api-gateway-proxy-expert (edge routing & proxies).
• Monitoring & Auto-Remediation: proactive-background-watcher (deployment health checks), self-healing-cloud-orchestrator (production crash hotfixing).

Description

Expert guide for deploying SaaS applications and their multiple entry points (landing page, app, super admin subdomain) on modern edge and serverless platforms. Covers Vercel, Cloudflare Workers & Pages, Railway, Fly.io, and Cloudflare Workers AI for AI-powered edge workloads.

Trigger Conditions

• Deploying a Next.js, Hono, or Astro application to Vercel, Cloudflare, or Railway.
• Configuring custom domains and subdomain routing (e.g., app.domain.com, admin.domain.com).
• Setting up Edge Middleware for multi-tenant tenant identification.
• Deploying AI inference workloads to Cloudflare Workers AI.
• Deploying long-running backend services to Railway or Fly.io.
• Implementing CDN caching strategies for SaaS applications.

Platform Selection Guide (2026)

Multi-Entry Point Deployment Architecture

For SaaS applications, separate deployments for each entry point:

Copy code
myapp.com         → Vercel (Marketing/Landing — Next.js static)
app.myapp.com     → Vercel (SaaS App — Next.js dynamic)
admin.myapp.com   → Vercel (Super Admin — Next.js, restricted access)
api.myapp.com     → Railway/Fly.io (Backend API — long-running)
cdn.myapp.com     → Cloudflare R2 (Static assets & user uploads)

Vercel — Next.js Deployment

Multi-Domain Configuration

jsonCopy code
// vercel.json
{
  "rewrites": [
    { "source": "/(.*)", "destination": "/$1" }
  ],
  "headers": [
    {
      "source": "/(.*)",
      "headers": [
        { "key": "X-Content-Type-Options", "value": "nosniff" },
        { "key": "X-Frame-Options", "value": "DENY" },
        { "key": "Strict-Transport-Security", "value": "max-age=63072000; includeSubDomains; preload" }
      ]
    }
  ]
}

Edge Middleware for Tenant Routing

typescriptCopy code
// middleware.ts — runs at the edge before every request
import { NextResponse } from 'next/server';
import type { NextRequest } from 'next/server';

export function middleware(request: NextRequest) {
  const hostname = request.headers.get('host') ?? '';
  const subdomain = hostname.split('.')[0];

  // Route admin subdomain — enforce strict auth check
  if (subdomain === 'admin') {
    const adminToken = request.cookies.get('admin-session')?.value;
    if (!adminToken) {
      return NextResponse.redirect(new URL('/login', request.url));
    }
  }

  // Identify tenant from subdomain for multi-tenant apps
  if (subdomain !== 'www' && subdomain !== 'app' && subdomain !== 'admin') {
    const response = NextResponse.next();
    response.headers.set('x-tenant-slug', subdomain);
    return response;
  }

  return NextResponse.next();
}

export const config = {
  matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
};

Cloudflare Workers — Edge APIs

Hono on Cloudflare Workers

typescriptCopy code
// src/index.ts
import { Hono } from 'hono';
import { cors } from 'hono/cors';
import { rateLimit } from '@/middleware/rateLimit';

const app = new Hono<{ Bindings: Env }>();

app.use('*', cors({ origin: ['https://app.myapp.com'] }));
app.use('/api/*', rateLimit(100)); // 100 req/min via KV

app.get('/api/health', (c) => c.json({ status: 'ok', region: c.env.CF_REGION }));

app.get('/api/data', async (c) => {
  // Access Cloudflare D1 (SQLite at edge)
  const result = await c.env.DB.prepare('SELECT * FROM items LIMIT 20').all();
  return c.json(result.results);
});

export default app;

Cloudflare Workers AI (On-Device Edge Inference)

Run AI models directly at Cloudflare's edge — no external API calls needed:

typescriptCopy code
export default {
  async fetch(request: Request, env: Env) {
    const { text } = await request.json() as { text: string };

    // Run Llama 3 or Mistral at the edge
    const response = await env.AI.run('@cf/meta/llama-3.1-8b-instruct', {
      messages: [
        { role: 'system', content: 'You are a helpful assistant.' },
        { role: 'user', content: text }
      ],
      stream: true,
    });

    return new Response(response, {
      headers: { 'Content-Type': 'text/event-stream' }
    });
  }
};

Available models on Workers AI:

• @cf/meta/llama-3.1-8b-instruct — Fast general-purpose chat
• @cf/mistral/mistral-7b-instruct-v0.2 — Fast instruction model
• @cf/baai/bge-small-en-v1.5 — Text embedding (for RAG)
• @cf/stabilityai/stable-diffusion-xl-base-1.0 — Image generation

Railway — Bun / Node.js Long-Running Services

dockerfileCopy code
# Dockerfile for Railway (Bun runtime)
FROM oven/bun:1.2-alpine
WORKDIR /app
COPY package.json bun.lockb ./
RUN bun install --frozen-lockfile
COPY . .
EXPOSE 3000
CMD ["bun", "run", "src/server.ts"]

tomlCopy code
# railway.toml
[build]
builder = "DOCKERFILE"

[deploy]
startCommand = "bun run src/server.ts"
healthcheckPath = "/health"
healthcheckTimeout = 10
restartPolicyType = "ON_FAILURE"

Environment Variables & Secrets Management

• Vercel: Use Vercel's built-in secrets panel — supports preview/production scoping.
• Cloudflare: Use wrangler secret put SECRET_NAME or the dashboard.
• Railway: Use Railway's variable groups for shared secrets across services.
• Never commit .env files — use .env.example as documentation only.

Caching Strategy

typescriptCopy code
// Vercel: Cache API responses at the edge
export async function GET() {
  const data = await fetchData();
  return Response.json(data, {
    headers: {
      'Cache-Control': 'public, s-maxage=60, stale-while-revalidate=300',
    }
  });
}

// Cloudflare: Use Cache API
const cache = caches.default;
const cached = await cache.match(request);
if (cached) return cached;

Sovereign Execution, Token Efficiency & Invariants

Bahasa Indonesia

Integrasi Orkestrasi

• Hulu & Orkestrasi: zero-to-prod-orchestrator (Deployment Fase 7), brainstorming, session-memory-manager.
• Pipeline CI/CD & Kontainer: ci-cd-devops-architect (otomasi deployment), github-actions-expert (aksi cloud & OIDC), docker-container-expert (image kontainer Railway/Fly).
• Komputasi Edge & Serverless: cloudflare-workers-expert (Cloudflare Workers, D1, KV, R2), api-gateway-proxy-expert (routing edge & proxy).
• Pemantauan & Auto-Remediasi: proactive-background-watcher (pemeriksaan kesehatan deployment), self-healing-cloud-orchestrator (perbaikan otomatis crash produksi).

Deskripsi

Panduan ahli untuk men-deploy aplikasi SaaS dan multiple entry points-nya (landing page, aplikasi, subdomain super admin) di platform edge dan serverless modern. Mencakup Vercel, Cloudflare Workers & Pages, Railway, Fly.io, dan Cloudflare Workers AI untuk workload AI di edge.

Kondisi Pemicu

• Men-deploy aplikasi Next.js, Hono, atau Astro ke Vercel, Cloudflare, atau Railway.
• Mengonfigurasi domain kustom dan routing subdomain (app.domain.com, admin.domain.com).
• Menyiapkan Edge Middleware untuk identifikasi tenant multi-tenant.
• Men-deploy workload inferensi AI ke Cloudflare Workers AI.
• Men-deploy layanan backend long-running ke Railway atau Fly.io.

Panduan Pemilihan Platform (2026)

Implementasi Pola Kunci (TypeScript)

1. Edge Middleware untuk Routing Subdomain & Tenant (Next.js 15)

typescriptCopy code
// middleware.ts
import { NextResponse } from 'next/server';
import type { NextRequest } from 'next/server';

export function middleware(request: NextRequest) {
  const hostname = request.headers.get('host') ?? '';
  const subdomain = hostname.split('.')[0];

  // Rute subdomain admin — tegakkan pemeriksaan otentikasi ketat
  if (subdomain === 'admin') {
    const sesiAdmin = request.cookies.get('admin-session')?.value;
    if (!sesiAdmin) {
      return NextResponse.redirect(new URL('/masuk', request.url));
    }
  }

  // Identifikasi tenant dari subdomain pada aplikasi multi-tenant
  if (subdomain !== 'www' && subdomain !== 'app' && subdomain !== 'admin') {
    const response = NextResponse.next();
    response.headers.set('x-tenant-slug', subdomain);
    return response;
  }

  return NextResponse.next();
}

export const config = {
  matcher: ['/((?!_next/static|_next/image|favicon.ico).*)'],
};

2. Cloudflare Workers AI (Inferensi AI di Edge)

typescriptCopy code
export default {
  async fetch(request: Request, env: Env) {
    const { teks } = (await request.json()) as { teks: string };

    // Jalankan inferensi Llama 3.1 langsung di edge tanpa server eksternal
    const response = await env.AI.run('@cf/meta/llama-3.1-8b-instruct', {
      messages: [
        { role: 'system', content: 'Anda adalah asisten AI yang akurat.' },
        { role: 'user', content: teks },
      ],
      stream: true,
    });

    return new Response(response, {
      headers: { 'Content-Type': 'text/event-stream' },
    });
  },
};

3. Railway Dockerfile untuk Runtime Bun Berkecepatan Tinggi

dockerfileCopy code
FROM oven/bun:1.2-alpine
WORKDIR /app
COPY package.json bun.lockb ./
RUN bun install --frozen-lockfile
COPY . .
EXPOSE 3000
CMD ["bun", "run", "src/server.ts"]

Matriks Eksekusi Berdaulat, Efisiensi Token & Invarian