Security Dashboard
| aar-security dashboard | CF Access |
| suchd.com | CF Access |
| archive-explorer | Password |
| R2 buckets | Private |
Verify: dash.cloudflare.com → Access → Applications
| Workers secrets | In .dev.vars |
| Local .env files | Unencrypted |
| CF Secrets Store | Not setup |
TODO: Migrate to CF Secrets Store
| App Attest | Enabled |
| HMAC Signing | Active |
| Replay Prevention | 5min window |
storage-worker + database-worker
| Key | Age | Status |
|---|
| Key | Age | Status |
|---|
| Endpoint | Status |
|---|
| database-worker | Deployed |
| storage-worker | Deployed |
| aar-radio | Deployed |
| aar-watermark | Deployed |
| transcripts | Deployed |
| loglines-v2 | Deployed |