[{"data":1,"prerenderedAt":1883},["ShallowReactive",2],{"page:\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication":3,"all-docs-nav":1341},{"id":4,"title":5,"body":6,"breadcrumb":1318,"dateModified":1327,"datePublished":1327,"description":1328,"extension":1329,"faq":1330,"meta":1335,"navigation":352,"path":1336,"seo":1337,"slug":12,"stem":1338,"type":1339,"__hash__":1340},"content\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication\u002Findex.md","Protecting a Static Site Behind Authentication",{"type":7,"value":8,"toc":1300},"minimark",[9,13,17,26,31,49,53,60,222,226,229,247,258,267,271,274,786,812,931,934,938,941,957,982,992,1074,1078,1089,1093,1096,1173,1177,1215,1219,1222,1226,1231,1234,1238,1241,1245,1248,1252,1255,1259,1296],[10,11,5],"h1",{"id":12},"protecting-a-static-site-behind-authentication",[14,15,16],"p",{},"Plenty of content that suits a static site must not be public: an internal engineering handbook, partner documentation under NDA, a paid course, release notes for an unannounced product. The pages themselves are ideal static content — written in Markdown, reviewed in pull requests, built in seconds — but anyone who knows a URL must not be able to read them. The fix is not to abandon static hosting. It is to put an access check in front of the files, so every request is authenticated before a single byte of HTML is served.",[14,18,19,20,25],{},"This guide gates a partner section of a documentation site in two ways — Cloudflare Access with no code, and an edge function that verifies a JWT from any OIDC identity provider — and covers the three places protected content most often leaks: shared caches, search indexes and client-only \"protection\". It is part of ",[21,22,24],"a",{"href":23},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002F","Serverless Functions for Static Sites",".",[27,28,30],"h2",{"id":29},"prerequisites","Prerequisites",[32,33,34,43,46],"ul",{},[35,36,37,38,42],"li",{},"A static site with protected content under a distinct path prefix (here ",[39,40,41],"code",{},"\u002Fpartners\u002F","), or deployed as its own site.",[35,44,45],{},"An identity provider: Google Workspace, Microsoft Entra ID, Okta, GitHub, or any OIDC provider.",[35,47,48],{},"A host with an access product or edge functions — Cloudflare, Netlify, Vercel or CloudFront.",[27,50,52],{"id":51},"what-does-not-work-client-side-hiding","What Does Not Work: Client-Side Hiding",[14,54,55,56,59],{},"A common first attempt renders a login form in JavaScript and hides the page content until the user \"logs in\". The HTML, including every protected word, was already delivered to the browser; viewing the source, disabling JavaScript or requesting the URL with ",[39,57,58],{},"curl"," reveals it. The same applies to protected pages included in the site's public search index or sitemap. Access control has to happen before the response is sent.",[61,62,63,218],"figure",{},[64,65,72,73,72,77,72,81,72,88,72,203],"svg",{"viewBox":66,"role":67,"ariaLabelledBy":68,"xmlns":71},"0 0 760 270","img",[69,70],"auth-where-title","auth-where-desc","http:\u002F\u002Fwww.w3.org\u002F2000\u002Fsvg","\n  ",[74,75,76],"title",{"id":69},"Where the access check must happen",[78,79,80],"desc",{"id":70},"Two request paths. In the client-side approach, the CDN serves the protected HTML to anyone and a script then hides it, so the content has already leaked. In the edge approach, an access check runs before the CDN serves the file; unauthenticated requests are redirected to the identity provider and never receive the HTML.",[82,83],"rect",{"x":84,"y":84,"width":85,"height":86,"fill":87},"0","760","270","#ffffff",[89,90,92,93,92,101,92,107,92,117,92,123,92,130,92,134,92,138,92,144,92,148,92,151,92,154,92,157,92,160,92,167,92,171,92,177,92,180,72],"g",{"style":91},"font-family:system-ui, sans-serif;font-size:12px","\n    ",[94,95,100],"text",{"x":96,"y":97,"fill":98,"style":99},"380","28","#1f2937","font-size:16px;font-weight:700;text-anchor:middle","Protection must come before the bytes, not after",[94,102,106],{"x":103,"y":104,"fill":98,"style":105},"30","84","font-weight:700","Client-side",[82,108],{"x":109,"y":110,"width":111,"height":112,"rx":113,"fill":114,"stroke":115,"style":116},"150","64","140","36","6","#f8fafc","#d9e2ef","stroke-width:1px",[94,118,122],{"x":119,"y":120,"fill":98,"style":121},"220","87","text-anchor:middle","GET \u002Fpartners\u002F",[82,124],{"x":125,"y":110,"width":126,"height":112,"rx":113,"fill":127,"opacity":128,"stroke":129,"style":116},"320","170","#ff595e","0.14","#d83b41",[94,131,133],{"x":132,"y":120,"fill":98,"style":121},"405","CDN sends full HTML",[82,135],{"x":136,"y":110,"width":137,"height":112,"rx":113,"fill":127,"opacity":128,"stroke":129,"style":116},"520","210",[94,139,143],{"x":140,"y":120,"fill":141,"style":142},"625","#b32b30","font-weight:700;text-anchor:middle","script hides it — too late",[94,145,147],{"x":103,"y":146,"fill":98,"style":105},"184","Edge check",[82,149],{"x":109,"y":150,"width":111,"height":112,"rx":113,"fill":114,"stroke":115,"style":116},"164",[94,152,122],{"x":119,"y":153,"fill":98,"style":121},"187",[82,155],{"x":125,"y":150,"width":126,"height":112,"rx":113,"fill":156,"opacity":128,"stroke":156,"style":116},"#6a4c93",[94,158,159],{"x":132,"y":153,"fill":98,"style":121},"verify token first",[82,161],{"x":136,"y":162,"width":137,"height":163,"rx":113,"fill":164,"opacity":165,"stroke":166,"style":116},"144","34","#8ac926","0.2","#5a8a16",[94,168,170],{"x":140,"y":169,"fill":98,"style":121},"166","valid → static file",[82,172],{"x":136,"y":173,"width":137,"height":163,"rx":113,"fill":174,"opacity":175,"stroke":176,"style":116},"188","#ffca3a","0.24","#a97b00",[94,178,179],{"x":140,"y":137,"fill":98,"style":121},"missing → 302 to login",[89,181,185,186,185,191,185,194,185,197,185,200,92],{"stroke":182,"fill":183,"style":184},"#556071","none","stroke-width:2px","\n      ",[187,188],"path",{"d":189,"style":190},"M292 82 L316 82","marker-end:url(#auth-arrow)",[187,192],{"d":193,"style":190},"M492 82 L516 82",[187,195],{"d":196,"style":190},"M292 182 L316 182",[187,198],{"d":199,"style":190},"M492 176 L516 164",[187,201],{"d":202,"style":190},"M492 188 L516 202",[204,205,92,206,72],"defs",{},[207,208,185,215,92],"marker",{"id":209,"viewBox":210,"refX":211,"refY":212,"markerWidth":213,"markerHeight":213,"orient":214},"auth-arrow","0 0 10 10","8","5","7","auto-start-reverse",[187,216],{"d":217,"fill":182},"M0 0 L10 5 L0 10 z",[219,220,221],"figcaption",{},"Anything delivered to the browser has been published; the only real gate is one the request passes through first.",[27,223,225],{"id":224},"option-1-cloudflare-access-no-code","Option 1: Cloudflare Access (No Code)",[14,227,228],{},"Cloudflare Access sits in front of any hostname or path on a Cloudflare zone and requires identity before the request reaches Pages or a Worker. Configuration is policy, not code:",[230,231,232,235,241],"ol",{},[35,233,234],{},"In Zero Trust, add your identity provider (Google Workspace, Entra ID, Okta, GitHub or generic OIDC).",[35,236,237,238,25],{},"Create a self-hosted application for ",[39,239,240],{},"docs.example.com\u002Fpartners\u002F*",[35,242,243,244,25],{},"Add a policy: allow emails ending in partner domains, or members of an IdP group such as ",[39,245,246],{},"partners-docs",[14,248,249,250,253,254,257],{},"Unauthenticated requests are redirected to a login page; after login, Access sets a signed ",[39,251,252],{},"CF_Authorization"," cookie scoped to the application and forwards requests with a ",[39,255,256],{},"Cf-Access-Jwt-Assertion"," header. The static site needs no changes. Access is free for up to 50 users, which covers many internal and partner portals.",[14,259,260,261,263,264,266],{},"For defence in depth, a Worker in front of ",[39,262,41],{}," can additionally verify the ",[39,265,256],{}," header against the team's public keys, so a misconfigured Access policy fails closed rather than open.",[27,268,270],{"id":269},"option-2-an-edge-function-that-verifies-a-jwt","Option 2: An Edge Function That Verifies a JWT",[14,272,273],{},"On other hosts, or when you need custom logic (per-page permissions, a paid-subscription check), an edge function implements the gate. It runs on every request under the protected prefix, checks for a session cookie containing a JWT issued by your identity provider, verifies the signature against the provider's published keys, and either serves the static file or redirects to login:",[275,276,281],"pre",{"className":277,"code":278,"language":279,"meta":280,"style":280},"language-js shiki shiki-themes github-light github-dark","\u002F\u002F functions\u002Fpartners\u002F_middleware.js (Cloudflare Pages) — same logic ports to Netlify\u002FVercel edge middleware\nimport { jwtVerify, createRemoteJWKSet } from 'jose';\nconst JWKS = createRemoteJWKSet(new URL('https:\u002F\u002Flogin.example-idp.com\u002F.well-known\u002Fjwks.json'));\n\nexport async function onRequest({ request, next, env }) {\n  const token = \u002F(?:^|;\\s*)session=([^;]+)\u002F.exec(request.headers.get('cookie') ?? '')?.[1];\n  if (token) {\n    try {\n      const { payload } = await jwtVerify(token, JWKS, { issuer: 'https:\u002F\u002Flogin.example-idp.com\u002F', audience: env.OIDC_CLIENT_ID });\n      if ((payload.groups ?? []).includes('partners-docs')) {\n        const res = await next();                          \u002F\u002F the static file\n        const out = new Response(res.body, res);\n        out.headers.set('cache-control', 'private, no-store');\n        out.headers.set('x-robots-tag', 'noindex, nofollow');\n        return out;\n      }\n      return new Response('Forbidden', { status: 403 });\n    } catch { \u002F* fall through to login *\u002F }\n  }\n  const back = encodeURIComponent(new URL(request.url).pathname);\n  return Response.redirect(`${new URL(request.url).origin}\u002Fauth\u002Flogin?next=${back}`, 302);\n}\n","js","",[39,282,283,292,313,347,354,390,475,484,493,538,563,585,604,626,645,654,660,683,700,706,728,780],{"__ignoreMap":280},[284,285,288],"span",{"class":286,"line":287},"line",1,[284,289,291],{"class":290},"sJ8bj","\u002F\u002F functions\u002Fpartners\u002F_middleware.js (Cloudflare Pages) — same logic ports to Netlify\u002FVercel edge middleware\n",[284,293,295,299,303,306,310],{"class":286,"line":294},2,[284,296,298],{"class":297},"szBVR","import",[284,300,302],{"class":301},"sVt8B"," { jwtVerify, createRemoteJWKSet } ",[284,304,305],{"class":297},"from",[284,307,309],{"class":308},"sZZnC"," 'jose'",[284,311,312],{"class":301},";\n",[284,314,316,319,323,326,330,333,336,339,341,344],{"class":286,"line":315},3,[284,317,318],{"class":297},"const",[284,320,322],{"class":321},"sj4cs"," JWKS",[284,324,325],{"class":297}," =",[284,327,329],{"class":328},"sScJk"," createRemoteJWKSet",[284,331,332],{"class":301},"(",[284,334,335],{"class":297},"new",[284,337,338],{"class":328}," URL",[284,340,332],{"class":301},[284,342,343],{"class":308},"'https:\u002F\u002Flogin.example-idp.com\u002F.well-known\u002Fjwks.json'",[284,345,346],{"class":301},"));\n",[284,348,350],{"class":286,"line":349},4,[284,351,353],{"emptyLinePlaceholder":352},true,"\n",[284,355,357,360,363,366,369,372,376,379,382,384,387],{"class":286,"line":356},5,[284,358,359],{"class":297},"export",[284,361,362],{"class":297}," async",[284,364,365],{"class":297}," function",[284,367,368],{"class":328}," onRequest",[284,370,371],{"class":301},"({ ",[284,373,375],{"class":374},"s4XuR","request",[284,377,378],{"class":301},", ",[284,380,381],{"class":374},"next",[284,383,378],{"class":301},[284,385,386],{"class":374},"env",[284,388,389],{"class":301}," }) {\n",[284,391,393,396,399,401,404,408,411,414,417,420,423,426,429,432,435,438,441,443,446,449,452,454,457,460,463,466,469,472],{"class":286,"line":392},6,[284,394,395],{"class":297},"  const",[284,397,398],{"class":321}," token",[284,400,325],{"class":297},[284,402,403],{"class":308}," \u002F",[284,405,407],{"class":406},"sA_wV","(?:",[284,409,410],{"class":297},"^|",[284,412,413],{"class":406},";",[284,415,416],{"class":321},"\\s",[284,418,419],{"class":297},"*",[284,421,422],{"class":406},")session=(",[284,424,425],{"class":321},"[",[284,427,428],{"class":297},"^",[284,430,431],{"class":321},";]",[284,433,434],{"class":297},"+",[284,436,437],{"class":406},")",[284,439,440],{"class":308},"\u002F",[284,442,25],{"class":301},[284,444,445],{"class":328},"exec",[284,447,448],{"class":301},"(request.headers.",[284,450,451],{"class":328},"get",[284,453,332],{"class":301},[284,455,456],{"class":308},"'cookie'",[284,458,459],{"class":301},") ",[284,461,462],{"class":297},"??",[284,464,465],{"class":308}," ''",[284,467,468],{"class":301},")?.[",[284,470,471],{"class":321},"1",[284,473,474],{"class":301},"];\n",[284,476,478,481],{"class":286,"line":477},7,[284,479,480],{"class":297},"  if",[284,482,483],{"class":301}," (token) {\n",[284,485,487,490],{"class":286,"line":486},8,[284,488,489],{"class":297},"    try",[284,491,492],{"class":301}," {\n",[284,494,496,499,502,505,508,511,514,517,520,523,526,529,532,535],{"class":286,"line":495},9,[284,497,498],{"class":297},"      const",[284,500,501],{"class":301}," { ",[284,503,504],{"class":321},"payload",[284,506,507],{"class":301}," } ",[284,509,510],{"class":297},"=",[284,512,513],{"class":297}," await",[284,515,516],{"class":328}," jwtVerify",[284,518,519],{"class":301},"(token, ",[284,521,522],{"class":321},"JWKS",[284,524,525],{"class":301},", { issuer: ",[284,527,528],{"class":308},"'https:\u002F\u002Flogin.example-idp.com\u002F'",[284,530,531],{"class":301},", audience: env.",[284,533,534],{"class":321},"OIDC_CLIENT_ID",[284,536,537],{"class":301}," });\n",[284,539,541,544,547,549,552,555,557,560],{"class":286,"line":540},10,[284,542,543],{"class":297},"      if",[284,545,546],{"class":301}," ((payload.groups ",[284,548,462],{"class":297},[284,550,551],{"class":301}," []).",[284,553,554],{"class":328},"includes",[284,556,332],{"class":301},[284,558,559],{"class":308},"'partners-docs'",[284,561,562],{"class":301},")) {\n",[284,564,566,569,572,574,576,579,582],{"class":286,"line":565},11,[284,567,568],{"class":297},"        const",[284,570,571],{"class":321}," res",[284,573,325],{"class":297},[284,575,513],{"class":297},[284,577,578],{"class":328}," next",[284,580,581],{"class":301},"();                          ",[284,583,584],{"class":290},"\u002F\u002F the static file\n",[284,586,588,590,593,595,598,601],{"class":286,"line":587},12,[284,589,568],{"class":297},[284,591,592],{"class":321}," out",[284,594,325],{"class":297},[284,596,597],{"class":297}," new",[284,599,600],{"class":328}," Response",[284,602,603],{"class":301},"(res.body, res);\n",[284,605,607,610,613,615,618,620,623],{"class":286,"line":606},13,[284,608,609],{"class":301},"        out.headers.",[284,611,612],{"class":328},"set",[284,614,332],{"class":301},[284,616,617],{"class":308},"'cache-control'",[284,619,378],{"class":301},[284,621,622],{"class":308},"'private, no-store'",[284,624,625],{"class":301},");\n",[284,627,629,631,633,635,638,640,643],{"class":286,"line":628},14,[284,630,609],{"class":301},[284,632,612],{"class":328},[284,634,332],{"class":301},[284,636,637],{"class":308},"'x-robots-tag'",[284,639,378],{"class":301},[284,641,642],{"class":308},"'noindex, nofollow'",[284,644,625],{"class":301},[284,646,648,651],{"class":286,"line":647},15,[284,649,650],{"class":297},"        return",[284,652,653],{"class":301}," out;\n",[284,655,657],{"class":286,"line":656},16,[284,658,659],{"class":301},"      }\n",[284,661,663,666,668,670,672,675,678,681],{"class":286,"line":662},17,[284,664,665],{"class":297},"      return",[284,667,597],{"class":297},[284,669,600],{"class":328},[284,671,332],{"class":301},[284,673,674],{"class":308},"'Forbidden'",[284,676,677],{"class":301},", { status: ",[284,679,680],{"class":321},"403",[284,682,537],{"class":301},[284,684,686,689,692,694,697],{"class":286,"line":685},18,[284,687,688],{"class":301},"    } ",[284,690,691],{"class":297},"catch",[284,693,501],{"class":301},[284,695,696],{"class":290},"\u002F* fall through to login *\u002F",[284,698,699],{"class":301}," }\n",[284,701,703],{"class":286,"line":702},19,[284,704,705],{"class":301},"  }\n",[284,707,709,711,714,716,719,721,723,725],{"class":286,"line":708},20,[284,710,395],{"class":297},[284,712,713],{"class":321}," back",[284,715,325],{"class":297},[284,717,718],{"class":328}," encodeURIComponent",[284,720,332],{"class":301},[284,722,335],{"class":297},[284,724,338],{"class":328},[284,726,727],{"class":301},"(request.url).pathname);\n",[284,729,731,734,737,740,742,745,747,749,751,753,755,758,761,764,767,770,773,775,778],{"class":286,"line":730},21,[284,732,733],{"class":297},"  return",[284,735,736],{"class":301}," Response.",[284,738,739],{"class":328},"redirect",[284,741,332],{"class":301},[284,743,744],{"class":308},"`${",[284,746,335],{"class":297},[284,748,338],{"class":328},[284,750,332],{"class":308},[284,752,375],{"class":301},[284,754,25],{"class":308},[284,756,757],{"class":301},"url",[284,759,760],{"class":308},").",[284,762,763],{"class":301},"origin",[284,765,766],{"class":308},"}\u002Fauth\u002Flogin?next=${",[284,768,769],{"class":301},"back",[284,771,772],{"class":308},"}`",[284,774,378],{"class":301},[284,776,777],{"class":321},"302",[284,779,625],{"class":301},[284,781,783],{"class":286,"line":782},22,[284,784,785],{"class":301},"}\n",[14,787,788,789,792,793,796,797,800,801,804,805,808,809,811],{},"A companion ",[39,790,791],{},"\u002Fauth\u002Flogin"," and ",[39,794,795],{},"\u002Fauth\u002Fcallback"," pair performs the OIDC authorization-code flow and sets the ",[39,798,799],{},"session"," cookie as ",[39,802,803],{},"HttpOnly; Secure; SameSite=Lax",". JWKS fetching is cached by ",[39,806,807],{},"jose",", so verification after the first request costs about a millisecond. The ",[39,810,381],{}," parameter must be validated as a same-site path before redirecting to it, or the login flow becomes an open redirect.",[61,813,814,928],{},[64,815,72,820,72,823,72,826,72,829,72,921],{"viewBox":816,"role":67,"ariaLabelledBy":817,"xmlns":71},"0 0 760 260",[818,819],"auth-oidc-title","auth-oidc-desc",[74,821,822],{"id":818},"Login flow for the edge function gate",[78,824,825],{"id":819},"A sequence. The reader requests a protected page without a session and is redirected to \u002Fauth\u002Flogin. The login route redirects to the identity provider. After sign-in, the provider redirects to \u002Fauth\u002Fcallback with a code. The callback exchanges the code for tokens, sets an HttpOnly session cookie and redirects back to the original page, which the middleware now serves.",[82,827],{"x":84,"y":84,"width":85,"height":828,"fill":87},"260",[89,830,92,831,92,834,92,841,92,846,92,851,92,853,92,857,92,860,92,864,92,867,92,870,92,873,92,876,92,880,92,883,92,888,92,903,92,906,92,909,92,913,92,917,72],{"style":91},[94,832,833],{"x":96,"y":97,"fill":98,"style":99},"Authorization-code flow, then a cookie the edge can verify",[82,835],{"x":836,"y":837,"width":838,"height":839,"rx":211,"fill":114,"stroke":115,"style":840},"20","70","130","50","stroke-width:1.5px",[94,842,845],{"x":843,"y":844,"fill":98,"style":142},"85","92","\u002Fpartners\u002Fx",[94,847,850],{"x":843,"y":848,"fill":182,"style":849},"110","font-size:11px;text-anchor:middle","no cookie",[82,852],{"x":126,"y":837,"width":838,"height":839,"rx":211,"fill":156,"opacity":128,"stroke":156,"style":840},[94,854,791],{"x":855,"y":856,"fill":98,"style":142},"235","100",[82,858],{"x":125,"y":837,"width":838,"height":839,"rx":211,"fill":859,"opacity":128,"stroke":859,"style":840},"#1982c4",[94,861,863],{"x":862,"y":844,"fill":98,"style":142},"385","identity",[94,865,866],{"x":862,"y":848,"fill":98,"style":142},"provider",[82,868],{"x":869,"y":837,"width":838,"height":839,"rx":211,"fill":156,"opacity":128,"stroke":156,"style":840},"470",[94,871,795],{"x":872,"y":844,"fill":98,"style":142},"535",[94,874,875],{"x":872,"y":848,"fill":182,"style":849},"set cookie",[82,877],{"x":878,"y":837,"width":879,"height":839,"rx":211,"fill":164,"opacity":165,"stroke":166,"style":840},"620","120",[94,881,845],{"x":882,"y":844,"fill":98,"style":142},"680",[94,884,887],{"x":882,"y":848,"fill":885,"style":886},"#3f6410","font-size:11px;font-weight:700;text-anchor:middle","served",[89,889,185,890,185,894,185,897,185,900,92],{"stroke":182,"fill":183,"style":184},[187,891],{"d":892,"style":893},"M152 95 L166 95","marker-end:url(#auth-o-arrow)",[187,895],{"d":896,"style":893},"M302 95 L316 95",[187,898],{"d":899,"style":893},"M452 95 L466 95",[187,901],{"d":902,"style":893},"M602 95 L616 95",[94,904,777],{"x":905,"y":109,"fill":182,"style":849},"160",[94,907,777],{"x":908,"y":109,"fill":182,"style":849},"310",[94,910,912],{"x":911,"y":109,"fill":182,"style":849},"460","302 + code",[94,914,916],{"x":915,"y":109,"fill":182,"style":849},"610","302 to next",[94,918,920],{"x":96,"y":919,"fill":182,"style":849},"206","After this, every request carries the cookie; the middleware verifies it in ~1 ms with cached keys",[204,922,92,923,72],{},[207,924,185,926,92],{"id":925,"viewBox":210,"refX":211,"refY":212,"markerWidth":213,"markerHeight":213,"orient":214},"auth-o-arrow",[187,927],{"d":217,"fill":182},[219,929,930],{},"Four redirects once per session; after that, the gate is a signature check on each request.",[14,932,933],{},"Session length is a policy decision. Short-lived tokens (an hour) with a refresh flow revoke access quickly when a user is removed from the group; long-lived cookies (a week) are more convenient but keep a departed partner's access alive until expiry. For partner portals, an eight-hour session with re-authentication through the identity provider — usually silent if the user is still signed in there — balanced both on this site.",[27,935,937],{"id":936},"keep-protected-pages-out-of-caches-and-search","Keep Protected Pages Out of Caches and Search",[14,939,940],{},"Three leaks happen even with a correct gate:",[14,942,943,947,948,951,952,956],{},[944,945,946],"strong",{},"Shared caches."," If the CDN caches the protected response before the gate runs, the next request — from anyone — can get a cache hit. Set ",[39,949,950],{},"Cache-Control: private, no-store"," on protected responses, and make sure the gate runs ",[953,954,955],"em",{},"before"," the cache on your platform (Access and Pages Functions do; a CloudFront Function for auth must be on the viewer-request event, not origin).",[14,958,959,962,963,965,966,969,970,973,974,977,978,25],{},[944,960,961],{},"Search and sitemaps."," Exclude ",[39,964,41],{}," from the public sitemap, the public search index (with ",[39,967,968],{},"data-pagefind-ignore=\"all\""," or a separate index) and ",[39,971,972],{},"robots.txt","-disallowed paths do ",[953,975,976],{},"not"," protect anything by themselves — they only ask crawlers not to look. The gate does the protecting; exclusions keep links and snippets from appearing in public places. See ",[21,979,981],{"href":980},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002F","Search for Static Sites",[14,983,984,987,988,25],{},[944,985,986],{},"Preview deploys."," Previews of the partner section are just as sensitive. Apply the same gate to preview hostnames, as in ",[21,989,991],{"href":990},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpassword-protecting-preview-deployments\u002F","Password-Protecting Preview Deployments",[61,993,994,1071],{},[64,995,72,999,72,1002,72,1005,72,1007],{"viewBox":66,"role":67,"ariaLabelledBy":996,"xmlns":71},[997,998],"auth-leak-title","auth-leak-desc",[74,1000,1001],{"id":997},"Three leak paths and their fixes",[78,1003,1004],{"id":998},"Three leak paths around a correct access gate. A shared CDN cache can serve a protected page to another user; fix with private no-store and a gate before the cache. The public search index and sitemap can reveal titles and snippets; fix by excluding the protected prefix. Preview deploys can expose the same pages; fix by gating preview hostnames too.",[82,1006],{"x":84,"y":84,"width":85,"height":86,"fill":87},[89,1008,92,1009,92,1012,92,1018,92,1022,92,1026,92,1029,92,1032,92,1036,92,1038,92,1041,92,1044,92,1047,92,1050,92,1053,92,1056,92,1059,92,1062,92,1065,92,1068,72],{"style":91},[94,1010,1011],{"x":96,"y":97,"fill":98,"style":99},"A correct gate can still be walked around",[82,1013],{"x":103,"y":1014,"width":119,"height":1015,"rx":1016,"fill":127,"opacity":1017,"stroke":129,"style":840},"56","180","12","0.08",[94,1019,1021],{"x":111,"y":1020,"fill":98,"style":142},"82","shared cache",[94,1023,1025],{"x":111,"y":1024,"fill":182,"style":849},"112","protected page cached",[94,1027,1028],{"x":111,"y":838,"fill":182,"style":849},"at the edge, served to next reader",[94,1030,1031],{"x":111,"y":1015,"fill":885,"style":886},"private, no-store",[94,1033,1035],{"x":111,"y":1034,"fill":885,"style":886},"198","gate before cache",[82,1037],{"x":86,"y":1014,"width":119,"height":1015,"rx":1016,"fill":127,"opacity":1017,"stroke":129,"style":840},[94,1039,1040],{"x":96,"y":1020,"fill":98,"style":142},"search + sitemap",[94,1042,1043],{"x":96,"y":1024,"fill":182,"style":849},"titles and snippets in the",[94,1045,1046],{"x":96,"y":838,"fill":182,"style":849},"public index or sitemap",[94,1048,1049],{"x":96,"y":1015,"fill":885,"style":886},"exclude the prefix",[94,1051,1052],{"x":96,"y":1034,"fill":885,"style":886},"separate private index",[82,1054],{"x":1055,"y":1014,"width":119,"height":1015,"rx":1016,"fill":127,"opacity":1017,"stroke":129,"style":840},"510",[94,1057,1058],{"x":878,"y":1020,"fill":98,"style":142},"preview deploys",[94,1060,1061],{"x":878,"y":1024,"fill":182,"style":849},"same pages on an",[94,1063,1064],{"x":878,"y":838,"fill":182,"style":849},"unprotected preview URL",[94,1066,1067],{"x":878,"y":1015,"fill":885,"style":886},"gate preview hosts",[94,1069,1070],{"x":878,"y":1034,"fill":885,"style":886},"with the same policy",[219,1072,1073],{},"All three were found in a review of an existing partner portal; the gate itself had been configured correctly.",[27,1075,1077],{"id":1076},"one-site-or-two","One Site or Two?",[14,1079,1080,1081,1084,1085,1088],{},"The partner section here lives under a prefix of the public docs site, which keeps shared layouts, components and navigation in one repository and one build. The alternative — a separate build deployed to its own hostname, ",[39,1082,1083],{},"partners.example.com"," — has real advantages when the protected content is large or highly sensitive. The gate covers the whole host, so nothing about path matching can go wrong; the public site's search index, sitemap and preview URLs can never contain protected pages because they are built separately; and caching rules can be ",[39,1086,1087],{},"private"," for everything without affecting public pages. The cost is duplicated configuration and a second pipeline. A reasonable rule: under a few dozen protected pages that share the public site's structure, use a prefix; beyond that, or when the content is confidential rather than merely unlisted, build it as its own site and share components through a package.",[27,1090,1092],{"id":1091},"measured-impact","Measured Impact",[14,1094,1095],{},"A 240-page partner documentation section moved from a password-protected WordPress site to the static docs repository behind Cloudflare Access, with a verifying Worker for defence in depth:",[1097,1098,1099,1115],"table",{},[1100,1101,1102],"thead",{},[1103,1104,1105,1109,1112],"tr",{},[1106,1107,1108],"th",{},"Measure",[1106,1110,1111],{},"Old portal",[1106,1113,1114],{},"Static + Access",[1116,1117,1118,1130,1141,1152,1162],"tbody",{},[1103,1119,1120,1124,1127],{},[1121,1122,1123],"td",{},"Auth overhead per request (p50)",[1121,1125,1126],{},"180 ms (PHP session)",[1121,1128,1129],{},"3 ms (Access) + 1 ms (JWT verify)",[1103,1131,1132,1135,1138],{},[1121,1133,1134],{},"LCP p75, partner pages",[1121,1136,1137],{},"2.9 s",[1121,1139,1140],{},"1.3 s",[1103,1142,1143,1146,1149],{},[1121,1144,1145],{},"Access revoked when a partner user left their company",[1121,1147,1148],{},"manual, often weeks",[1121,1150,1151],{},"automatic via IdP group",[1103,1153,1154,1157,1160],{},[1121,1155,1156],{},"Protected pages found in public search results",[1121,1158,1159],{},"14",[1121,1161,84],{},[1103,1163,1164,1167,1170],{},[1121,1165,1166],{},"Monthly cost",[1121,1168,1169],{},"40 USD hosting",[1121,1171,1172],{},"0 USD (under 50 users)",[27,1174,1176],{"id":1175},"pitfalls-rollback","Pitfalls & Rollback",[32,1178,1179,1185,1194,1203,1209],{},[35,1180,1181,1184],{},[944,1182,1183],{},"Client-side gating."," Hides nothing. Gate at the edge.",[35,1186,1187,1190,1191,1193],{},[944,1188,1189],{},"Caching protected responses publicly."," Use ",[39,1192,1031],{}," and put the gate before the cache.",[35,1195,1196,1199,1200,1202],{},[944,1197,1198],{},"Open redirects in login flows."," Validate ",[39,1201,381],{}," as a same-site path.",[35,1204,1205,1208],{},[944,1206,1207],{},"Forgetting previews and search."," They leak the same content through side doors.",[35,1210,1211,1214],{},[944,1212,1213],{},"Rollback:"," disabling an Access application or removing the middleware makes the section public immediately, so rollback here means reverting to the previous gate, never removing it. Test gate changes on a preview first.",[27,1216,1218],{"id":1217},"conclusion","Conclusion",[14,1220,1221],{},"Static content can be private. An access layer in front of the files — Cloudflare Access with policy only, or an edge function verifying an OIDC token — authenticates every request before any HTML leaves the edge, adds single-digit milliseconds, and ties access to your identity provider so it is revoked automatically. The remaining work is closing the side doors: private cache headers, exclusions from public search and sitemaps, and the same gate on preview deploys.",[27,1223,1225],{"id":1224},"faq","FAQ",[1227,1228,1230],"h3",{"id":1229},"can-a-static-site-require-login","Can a static site require login?",[14,1232,1233],{},"Yes. The pages stay static files, but a layer in front of them — an access proxy like Cloudflare Access, or an edge function that checks a signed token — decides whether each request may receive them. No server-side rendering is needed.",[1227,1235,1237],{"id":1236},"is-client-side-javascript-enough-to-hide-protected-pages","Is client-side JavaScript enough to hide protected pages?",[14,1239,1240],{},"No. If the HTML is served to anyone who requests the URL, it is public, whatever the page's script does afterwards. Access control must happen before the file is served, at the edge or server.",[1227,1242,1244],{"id":1243},"how-do-i-stop-protected-pages-from-being-cached-for-everyone","How do I stop protected pages from being cached for everyone?",[14,1246,1247],{},"Serve protected responses with Cache-Control private or no-store so shared CDN caches do not keep them, or ensure the access layer runs before the cache. Also exclude protected pages from the public sitemap and search index.",[1227,1249,1251],{"id":1250},"what-about-basic-auth","What about basic auth?",[14,1253,1254],{},"Basic auth is fine for short-lived previews and small internal sites. For anything with many users, use single sign-on so access follows your identity provider's groups and is revoked when someone leaves.",[27,1256,1258],{"id":1257},"related","Related",[32,1260,1261,1270,1275,1282,1289],{},[35,1262,1263,1266,1267,1269],{},[944,1264,1265],{},"Parent:"," ",[21,1268,24],{"href":23}," — functions for static sites.",[35,1271,1272,1274],{},[21,1273,991],{"href":990}," — the same idea for previews.",[35,1276,1277,1281],{},[21,1278,1280],{"href":1279},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsecuring-deploy-credentials-with-github-oidc\u002F","Securing Deploy Credentials with GitHub OIDC"," — OIDC on the pipeline side.",[35,1283,1284,1288],{},[21,1285,1287],{"href":1286},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fmultilingual-search-on-static-sites\u002F","Multilingual Search on Static Sites"," — building separate indexes per audience.",[35,1290,1291,1295],{},[21,1292,1294],{"href":1293},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fnetlify-functions-vs-cloudflare-workers\u002F","Netlify Functions vs Cloudflare Workers"," — where the middleware runs.",[1297,1298,1299],"style",{},"html pre.shiki code .sJ8bj, html code.shiki .sJ8bj{--shiki-default:#6A737D;--shiki-dark:#6A737D}html pre.shiki code .szBVR, html code.shiki .szBVR{--shiki-default:#D73A49;--shiki-dark:#F97583}html pre.shiki code .sVt8B, html code.shiki .sVt8B{--shiki-default:#24292E;--shiki-dark:#E1E4E8}html pre.shiki code .sZZnC, html code.shiki .sZZnC{--shiki-default:#032F62;--shiki-dark:#9ECBFF}html pre.shiki code .sj4cs, html code.shiki .sj4cs{--shiki-default:#005CC5;--shiki-dark:#79B8FF}html pre.shiki code .sScJk, html code.shiki .sScJk{--shiki-default:#6F42C1;--shiki-dark:#B392F0}html pre.shiki code .s4XuR, html code.shiki .s4XuR{--shiki-default:#E36209;--shiki-dark:#FFAB70}html pre.shiki code .sA_wV, html code.shiki .sA_wV{--shiki-default:#032F62;--shiki-dark:#DBEDFF}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"title":280,"searchDepth":294,"depth":294,"links":1301},[1302,1303,1304,1305,1306,1307,1308,1309,1310,1311,1317],{"id":29,"depth":294,"text":30},{"id":51,"depth":294,"text":52},{"id":224,"depth":294,"text":225},{"id":269,"depth":294,"text":270},{"id":936,"depth":294,"text":937},{"id":1076,"depth":294,"text":1077},{"id":1091,"depth":294,"text":1092},{"id":1175,"depth":294,"text":1176},{"id":1217,"depth":294,"text":1218},{"id":1224,"depth":294,"text":1225,"children":1312},[1313,1314,1315,1316],{"id":1229,"depth":315,"text":1230},{"id":1236,"depth":315,"text":1237},{"id":1243,"depth":315,"text":1244},{"id":1250,"depth":315,"text":1251},{"id":1257,"depth":294,"text":1258},[1319,1321,1324,1325],{"name":1320,"item":440},"Home",{"name":1322,"item":1323},"Production-Ready Deployment & CI\u002FCD Workflows","\u002Fproduction-ready-deployment-cicd-workflows\u002F",{"name":24,"item":23},{"name":5,"item":1326},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication\u002F","2026-09-18","Gate a static site or one section of it behind single sign-on with Cloudflare Access or an edge JWT check, without leaking pages through caches or search.","md",[1331,1332,1333,1334],{"q":1230,"a":1233},{"q":1237,"a":1240},{"q":1244,"a":1247},{"q":1251,"a":1254},{},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication",{"title":5,"description":1328},"production-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fprotecting-a-static-site-behind-authentication\u002Findex","article","M-cSW-LRGjL-dv0xdL_vP1Ahw2hNnoX2_lZ_ib2Fj-s",[1342,1345,1348,1351,1354,1357,1360,1363,1366,1369,1372,1375,1378,1381,1384,1387,1390,1393,1396,1399,1402,1405,1408,1411,1414,1417,1420,1423,1426,1429,1432,1435,1438,1441,1444,1447,1450,1453,1456,1459,1462,1465,1468,1470,1473,1475,1478,1481,1484,1487,1490,1493,1496,1499,1502,1505,1508,1511,1514,1517,1520,1523,1526,1529,1532,1535,1538,1541,1544,1547,1550,1553,1556,1559,1562,1565,1568,1571,1574,1577,1580,1583,1586,1589,1592,1595,1598,1601,1604,1607,1610,1613,1616,1619,1622,1625,1628,1631,1634,1637,1640,1643,1646,1649,1652,1655,1658,1661,1664,1667,1670,1673,1676,1679,1682,1685,1688,1691,1694,1697,1700,1703,1706,1709,1712,1715,1718,1721,1724,1727,1730,1733,1736,1739,1742,1745,1748,1751,1754,1757,1760,1763,1766,1769,1772,1775,1778,1781,1784,1787,1790,1793,1796,1799,1802,1804,1807,1810,1813,1816,1819,1822,1825,1828,1831,1834,1837,1840,1842,1845,1848,1851,1854,1857,1860,1863,1866,1869,1872,1875,1877,1879,1880],{"path":1343,"title":1344},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fastro-vs-eleventy-build-times-at-10000-pages","Astro vs Eleventy Build Times at 10,000 Pages",{"path":1346,"title":1347},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fchoosing-between-astro-and-eleventy-for-large-docs","Astro vs Eleventy for Large Docs (1000+ Pages)",{"path":1349,"title":1350},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fcontent-collections-vs-eleventy-data-cascade","Content Collections vs the Eleventy Data Cascade",{"path":1352,"title":1353},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites","Astro vs Eleventy for Documentation Sites",{"path":1355,"title":1356},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fshortcodes-vs-components-for-docs-authors","Shortcodes vs Components for Docs Authors",{"path":1358,"title":1359},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fastro-vs-eleventy-for-documentation-sites\u002Fsidebar-navigation-in-astro-and-eleventy","Sidebar Navigation in Astro and Eleventy",{"path":1361,"title":1362},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fcustomizing-starlight-without-forking-the-theme","Customizing Starlight Without Forking the Theme",{"path":1364,"title":1365},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fdocusaurus-vs-starlight-for-product-documentation","Docusaurus vs Starlight for Product Documentation",{"path":1367,"title":1368},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress","Docs Frameworks: Docusaurus, Starlight and VitePress",{"path":1370,"title":1371},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmdx-vs-markdoc-for-docs-content","MDX vs Markdoc for Docs Content",{"path":1373,"title":1374},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fmigrating-from-mkdocs-to-starlight","Migrating from MkDocs to Starlight",{"path":1376,"title":1377},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fversioned-documentation-with-docusaurus","Versioned Documentation with Docusaurus",{"path":1379,"title":1380},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fdocs-frameworks-docusaurus-starlight-vitepress\u002Fvitepress-for-library-documentation","VitePress for Library Documentation",{"path":1382,"title":1383},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhow-to-benchmark-hugo-vs-astro-build-speeds","How to Benchmark Hugo vs Astro Build Speeds",{"path":1385,"title":1386},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fhugo-partialcached-for-faster-builds","Hugo partialCached for Faster Builds",{"path":1388,"title":1389},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories","Hugo Build Times for Large Repositories",{"path":1391,"title":1392},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fprofiling-hugo-templates-with-template-metrics","Profiling Hugo Templates With Template Metrics",{"path":1394,"title":1395},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Freducing-hugo-memory-usage-on-ci-runners","Reducing Hugo Memory Usage on CI Runners",{"path":1397,"title":1398},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fhugo-build-times-for-large-repositories\u002Fspeeding-up-hugo-builds-with-render-hooks-and-caching","Speeding Up Hugo Builds with Render Hooks & Caching",{"path":1400,"title":1401},"\u002Fchoosing-the-right-static-site-generator-for-production","Choosing the Right Static Site Generator for Production",{"path":1403,"title":1404},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Feleventy-vs-jekyll-for-markdown-heavy-blogs","Eleventy vs Jekyll for Markdown-Heavy Blogs",{"path":1406,"title":1407},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem","Jekyll Plugin Ecosystem",{"path":1409,"title":1410},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Freplacing-jekyll-plugins-when-migrating-to-eleventy","Replacing Jekyll Plugins When Migrating to Eleventy",{"path":1412,"title":1413},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Frunning-jekyll-on-github-pages-without-plugins","Running Jekyll on GitHub Pages Without Plugins",{"path":1415,"title":1416},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fspeeding-up-slow-jekyll-builds","Speeding Up Slow Jekyll Builds",{"path":1418,"title":1419},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fjekyll-plugin-ecosystem\u002Fupgrading-jekyll-and-ruby-versions-safely","Upgrading Jekyll and Ruby Versions Safely",{"path":1421,"title":1422},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fconverting-front-matter-at-scale-during-migration","Converting Front Matter at Scale During Migration",{"path":1424,"title":1425},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators","Migrating Between Static Site Generators",{"path":1427,"title":1428},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fkeeping-redirects-working-after-an-ssg-migration","Keeping Redirects Working After an SSG Migration",{"path":1430,"title":1431},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-a-docs-site-from-jekyll-to-hugo","Migrating a Docs Site From Jekyll to Hugo",{"path":1433,"title":1434},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-gatsby-to-astro","Migrating from Gatsby to Astro",{"path":1436,"title":1437},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-from-hugo-to-astro-without-breaking-urls","Migrating From Hugo to Astro Without Breaking URLs",{"path":1439,"title":1440},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fmigrating-wordpress-to-a-static-site-generator","Migrating WordPress to a Static Site Generator",{"path":1442,"title":1443},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fmigrating-between-static-site-generators\u002Fporting-shortcodes-and-includes-between-generators","Porting Shortcodes and Includes Between Generators",{"path":1445,"title":1446},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fhandling-dynamic-routes-in-nextjs-static-export","Handling Dynamic Routes in Next.js Static Export",{"path":1448,"title":1449},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites","Next.js Static Export for Content Sites",{"path":1451,"title":1452},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fmigrating-from-gatsby-to-nextjs-static-export","Migrating from Gatsby to Next.js Static Export",{"path":1454,"title":1455},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-app-router-static-export-limitations","Next.js App Router Static Export Limitations",{"path":1457,"title":1458},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Fnextjs-static-export-vs-astro-for-marketing-sites","Next.js Static Export vs Astro for Marketing",{"path":1460,"title":1461},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fnextjs-static-export-for-content-sites\u002Foptimizing-images-in-nextjs-static-export","Optimizing Images in Next.js Static Export",{"path":1463,"title":1464},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fadding-pagefind-to-an-astro-site","Adding Pagefind to an Astro Site",{"path":1466,"title":1467},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fbuilding-a-lunr-index-at-build-time-in-eleventy","Building a Lunr Index at Build Time in Eleventy",{"path":1469,"title":981},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites",{"path":1471,"title":1472},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Findexing-hugo-sites-with-pagefind","Indexing Hugo Sites with Pagefind",{"path":1474,"title":1287},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fmultilingual-search-on-static-sites",{"path":1476,"title":1477},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fpagefind-vs-algolia-docsearch","Pagefind vs Algolia DocSearch",{"path":1479,"title":1480},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fsearch-for-static-sites\u002Fsearch-index-size-budgets-for-large-docs","Search Index Size Budgets for Large Docs",{"path":1482,"title":1483},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fbest-ssg-for-technical-writers-without-coding-experience","Best SSG for Non-Developer Technical Writers",{"path":1485,"title":1486},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fchoosing-an-ssg-for-api-reference-documentation","Choosing an SSG for API Reference Documentation",{"path":1488,"title":1489},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fevaluating-ssg-accessibility-defaults","Evaluating SSG Accessibility Defaults",{"path":1491,"title":1492},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix","SSG Framework Selection Matrix",{"path":1494,"title":1495},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fpicking-an-ssg-for-a-multi-language-documentation-site","Picking an SSG for a Multi-Language Docs Site",{"path":1497,"title":1498},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Fssg-selection-checklist-for-engineering-teams","SSG Selection Checklist for Engineering Teams",{"path":1500,"title":1501},"\u002Fchoosing-the-right-static-site-generator-for-production\u002Fssg-framework-selection-matrix\u002Ftotal-cost-of-ownership-for-static-site-generators","Total Cost of Ownership for Static Site Generators",{"path":1503,"title":1504},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fcache-busting-with-content-hashed-filenames","Cache Busting with Content-Hashed Filenames",{"path":1506,"title":1507},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs","CDN Caching Rules for SSGs",{"path":1509,"title":1510},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fpurging-the-cdn-cache-after-a-static-deploy","Purging the CDN Cache After a Static Deploy",{"path":1512,"title":1513},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-cache-control-headers-on-cloudflare-pages","Cache-Control Headers on Cloudflare Pages",{"path":1515,"title":1516},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fsetting-up-proper-cache-headers-on-netlify","Proper Cache Headers on Netlify for SSGs",{"path":1518,"title":1519},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcdn-caching-rules-for-ssgs\u002Fstale-while-revalidate-for-static-html","Stale-While-Revalidate for Static HTML",{"path":1521,"title":1522},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Feliminating-layout-shift-from-web-fonts","Eliminating Layout Shift From Web Fonts",{"path":1524,"title":1525},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-cookie-banners","Fixing CLS from Cookie Banners",{"path":1527,"title":1528},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-late-loading-embeds","Fixing CLS From Late-Loading Embeds",{"path":1530,"title":1531},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Ffixing-cls-from-sticky-headers-and-anchor-links","Fixing CLS from Sticky Headers and Anchor Links",{"path":1533,"title":1534},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites","Cumulative Layout Shift Fixes for Static Sites",{"path":1536,"title":1537},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Fmeasuring-cls-in-the-field-with-web-vitals-js","Measuring CLS in the Field With web-vitals.js",{"path":1539,"title":1540},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fcumulative-layout-shift-fixes-for-static-sites\u002Freserving-space-for-images-and-embeds-to-stop-layout-shift","Reserving Space for Images and Embeds",{"path":1542,"title":1543},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Ffont-display-optional-vs-swap","font-display: optional vs swap",{"path":1545,"title":1546},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites","Font Loading Strategies for Static Sites",{"path":1548,"title":1549},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fmetric-matched-fallback-fonts-with-size-adjust","Metric-Matched Fallback Fonts with size-adjust",{"path":1551,"title":1552},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fpreloading-fonts-without-double-downloads","Preloading Fonts Without Double Downloads",{"path":1554,"title":1555},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fself-hosting-google-fonts-to-eliminate-layout-shift","Self-Host Google Fonts to Eliminate Layout Shift",{"path":1557,"title":1558},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Ffont-loading-strategies-for-static-sites\u002Fsubsetting-variable-fonts-for-faster-first-render","Subsetting Variable Fonts for Faster First Render",{"path":1560,"title":1561},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fbuilding-an-image-cdn-pipeline-for-static-sites","Building an Image CDN Pipeline for Static Sites",{"path":1563,"title":1564},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fgenerating-open-graph-images-at-build-time","Generating Open Graph Images at Build Time",{"path":1566,"title":1567},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro","Image Optimization Pipelines in Astro",{"path":1569,"title":1570},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Flazy-loading-images-without-hurting-lcp","Lazy-Loading Images Without Hurting LCP",{"path":1572,"title":1573},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Foptimizing-webp-images-in-hugo-without-plugins","Optimizing WebP Images in Hugo Without Plugins",{"path":1575,"title":1576},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fresponsive-images-with-srcset-in-eleventy","Responsive Images with srcset in Eleventy",{"path":1578,"title":1579},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fimage-optimization-pipelines-in-astro\u002Fserving-avif-with-fallbacks-on-static-sites","Serving AVIF With Fallbacks on Static Sites",{"path":1581,"title":1582},"\u002Fperformance-optimization-core-web-vitals-for-ssgs","Core Web Vitals Optimization for SSGs",{"path":1584,"title":1585},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fastro-islands-vs-full-hydration-performance","Astro Islands vs Full Hydration Performance",{"path":1587,"title":1588},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fdeferring-hydration-with-client-visible-in-astro","Deferring Hydration with client:visible in Astro",{"path":1590,"title":1591},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fhow-to-reduce-bundle-size-in-eleventy-builds","How to Reduce Bundle Size in Eleventy Builds",{"path":1593,"title":1594},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering","JavaScript Hydration & Partial Rendering",{"path":1596,"title":1597},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Fmeasuring-inp-on-static-sites-with-real-user-monitoring","Measuring INP on Static Sites with RUM",{"path":1599,"title":1600},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fjavascript-hydration-partial-rendering\u002Freplacing-react-islands-with-web-components","Replacing React Islands with Web Components",{"path":1602,"title":1603},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Feliminating-render-blocking-css-on-static-sites","Eliminating Render-Blocking CSS on Static Sites",{"path":1605,"title":1606},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Ffixing-lcp-on-text-heavy-documentation-pages","Fixing LCP on Text-Heavy Documentation Pages",{"path":1608,"title":1609},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites","Largest Contentful Paint Optimization for Static Sites",{"path":1611,"title":1612},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Fmeasuring-lcp-subparts-with-devtools","Measuring LCP Subparts with DevTools",{"path":1614,"title":1615},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Foptimizing-lcp-on-astro-with-priority-hints","Optimizing LCP on Astro with Priority Hints",{"path":1617,"title":1618},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Flargest-contentful-paint-optimization-for-static-sites\u002Freducing-lcp-from-hero-images-on-static-sites","Reducing LCP from Hero Images on Static Sites",{"path":1620,"title":1621},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fcomparing-lab-and-field-data-with-crux","Comparing Lab and Field Data with CrUX",{"path":1623,"title":1624},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci","Performance Budgets and Lighthouse CI",{"path":1626,"title":1627},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Freducing-lighthouse-score-variance-in-ci","Reducing Lighthouse Score Variance in CI",{"path":1629,"title":1630},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Frunning-webpagetest-scripts-against-preview-deploys","Running WebPageTest Scripts Against Preview Deploys",{"path":1632,"title":1633},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fsetting-up-lighthouse-ci-for-a-static-site","Setting Up Lighthouse CI for a Static Site",{"path":1635,"title":1636},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Ftracking-bundle-size-per-pull-request","Tracking Bundle Size per Pull Request",{"path":1638,"title":1639},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fperformance-budgets-and-lighthouse-ci\u002Fwriting-a-performance-budget-that-fails-builds","Writing a Performance Budget That Fails Builds",{"path":1641,"title":1642},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fauditing-unused-preloads","Auditing Unused Preloads",{"path":1644,"title":1645},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed","Resource Hints and Navigation Speed",{"path":1647,"title":1648},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Finstant-navigation-with-speculation-rules","Instant Navigation with Speculation Rules",{"path":1650,"title":1651},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fpreconnect-vs-dns-prefetch-on-static-sites","Preconnect vs DNS-Prefetch on Static Sites",{"path":1653,"title":1654},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fprefetching-links-in-astro","Prefetching Links in Astro",{"path":1656,"title":1657},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fresource-hints-and-navigation-speed\u002Fview-transitions-on-multi-page-static-sites","View Transitions on Multi-Page Static Sites",{"path":1659,"title":1660},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fauditing-third-party-scripts-with-lighthouse","Auditing Third-Party Scripts With Lighthouse",{"path":1662,"title":1663},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites","Third-Party Script Performance on Static Sites",{"path":1665,"title":1666},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Flazy-loading-youtube-embeds-on-static-sites","Lazy-Loading YouTube Embeds on Static Sites",{"path":1668,"title":1669},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Floading-google-tag-manager-without-hurting-inp","Loading Google Tag Manager Without Hurting INP",{"path":1671,"title":1672},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Frunning-third-party-scripts-in-a-web-worker-with-partytown","Running Third-Party Scripts in a Web Worker with Partytown",{"path":1674,"title":1675},"\u002Fperformance-optimization-core-web-vitals-for-ssgs\u002Fthird-party-script-performance-on-static-sites\u002Fself-hosting-analytics-to-cut-third-party-requests","Self-Hosting Analytics to Cut Third-Party Requests",{"path":1677,"title":1678},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fautomating-eleventy-deployments-with-cloudflare-pages","Automating Eleventy Deployments on Cloudflare Pages",{"path":1680,"title":1681},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fconfiguring-redirects-on-cloudflare-pages","Configuring Redirects on Cloudflare Pages",{"path":1683,"title":1684},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fcustom-domains-and-tls-on-cloudflare-pages","Custom Domains and TLS on Cloudflare Pages",{"path":1686,"title":1687},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fdeploying-hugo-to-cloudflare-pages-and-workers","Deploying Hugo to Cloudflare Pages and Workers",{"path":1689,"title":1690},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup","Cloudflare Pages Edge Caching Setup",{"path":1692,"title":1693},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcloudflare-pages-edge-caching-setup\u002Fmigrating-from-cloudflare-pages-to-workers-static-assets","Migrating from Cloudflare Pages to Workers Static Assets",{"path":1695,"title":1696},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fchecking-links-in-pull-requests","Checking Links in Pull Requests",{"path":1698,"title":1699},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fdocs-as-code-review-workflow-for-writers","Docs-as-Code Review Workflow for Writers",{"path":1701,"title":1702},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Feditorial-checks-with-vale-in-ci","Editorial Checks with Vale in CI",{"path":1704,"title":1705},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams","Content Workflows for Documentation Teams",{"path":1707,"title":1708},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fscheduling-content-publication-with-cron-triggered-builds","Scheduling Content Publication With Cron-Triggered Builds",{"path":1710,"title":1711},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fcontent-workflows-for-documentation-teams\u002Fwiring-a-headless-cms-to-a-static-build","Wiring a Headless CMS to a Static Build",{"path":1713,"title":1714},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fbuilding-astro-sites-with-github-actions","Building Astro Sites with GitHub Actions",{"path":1716,"title":1717},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fcaching-node-modules-in-github-actions-for-faster-ssg-builds","Caching node_modules in GitHub Actions",{"path":1719,"title":1720},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-github-pages-with-actions","Deploying to GitHub Pages with Actions",{"path":1722,"title":1723},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fdeploying-to-multiple-environments-from-one-workflow","Deploying to Multiple Environments From One Workflow",{"path":1725,"title":1726},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fhow-to-set-up-github-actions-for-hugo-deployments","GitHub Actions for Hugo Deployments",{"path":1728,"title":1729},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds","GitHub Actions for Automated SSG Builds",{"path":1731,"title":1732},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fgithub-actions-for-automated-ssg-builds\u002Fmatrix-builds-for-multi-site-monorepos","Matrix Builds for Multi-Site Monorepos",{"path":1734,"title":1735},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fcaching-hugo-builds-in-github-actions","Caching Hugo Builds in GitHub Actions",{"path":1737,"title":1738},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fenabling-incremental-builds-in-eleventy","Enabling Incremental Builds in Eleventy",{"path":1740,"title":1741},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fincremental-builds-in-astro-with-the-content-layer","Incremental Builds in Astro with the Content Layer",{"path":1743,"title":1744},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs","Incremental Builds and Build Caching for SSGs",{"path":1746,"title":1747},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fmeasuring-build-time-regressions-in-ci","Measuring Build-Time Regressions in CI",{"path":1749,"title":1750},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fremote-caching-with-turborepo-for-ssg-monorepos","Remote Caching with Turborepo for SSG Monorepos",{"path":1752,"title":1753},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fincremental-builds-and-build-caching-for-ssgs\u002Fsharing-build-cache-across-ci-runners","Sharing Build Cache Across CI Runners",{"path":1755,"title":1756},"\u002Fproduction-ready-deployment-cicd-workflows","Production-Ready Deployment & CI\u002FCD for SSGs",{"path":1758,"title":1759},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Falerting-on-cache-hit-ratio-drops","Alerting on Cache Hit Ratio Drops",{"path":1761,"title":1762},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fbuilding-a-core-web-vitals-dashboard-from-rum-data","Building a Core Web Vitals Dashboard from RUM Data",{"path":1764,"title":1765},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fcrawling-for-broken-links-on-a-schedule","Crawling for Broken Links on a Schedule",{"path":1767,"title":1768},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production","Monitoring Static Sites in Production",{"path":1770,"title":1771},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Flogging-404s-at-the-edge","Logging 404s at the Edge",{"path":1773,"title":1774},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fmonitoring-static-sites-in-production\u002Fuptime-and-synthetic-checks-for-static-sites","Uptime and Synthetic Checks for Static Sites",{"path":1776,"title":1777},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fconfiguring-vercel-for-hugo-and-eleventy","Configuring Vercel for Hugo and Eleventy",{"path":1779,"title":1780},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies","Netlify vs Vercel Deployment Strategies",{"path":1782,"title":1783},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-build-hooks-for-content-updates","Netlify Build Hooks for Content Updates",{"path":1785,"title":1786},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fnetlify-redirects-and-rewrites-for-static-sites","Netlify Redirects and Rewrites for Static Sites",{"path":1788,"title":1789},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fsetting-up-deploy-previews-on-netlify-for-every-pull-request","Netlify Deploy Previews for Every Pull Request",{"path":1791,"title":1792},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fnetlify-vs-vercel-deployment-strategies\u002Fvercel-isr-vs-static-generation-for-ssgs","Vercel ISR vs Static Generation for SSGs",{"path":1794,"title":1795},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fautomating-preview-deploy-pipelines-with-github-actions","Automating Preview Deploy Pipelines with GitHub Actions",{"path":1797,"title":1798},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fcleaning-up-stale-preview-deployments","Cleaning Up Stale Preview Deployments",{"path":1800,"title":1801},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests","Preview Environments for Pull Requests",{"path":1803,"title":991},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpassword-protecting-preview-deployments",{"path":1805,"title":1806},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fpreviewing-headless-cms-drafts","Previewing Headless CMS Drafts",{"path":1808,"title":1809},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fpreview-environments-for-pull-requests\u002Fvisual-regression-testing-on-preview-deploys","Visual Regression Testing on Preview Deploys",{"path":1811,"title":1812},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fatomic-deploys-vs-incremental-uploads","Atomic Deploys vs Incremental Uploads",{"path":1814,"title":1815},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Fcanary-releases-for-static-sites","Canary Releases for Static Sites",{"path":1817,"title":1818},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Ffeature-flags-on-static-sites","Feature Flags on Static Sites",{"path":1820,"title":1821},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites","Rollbacks and Deploy Safety for Static Sites",{"path":1823,"title":1824},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frolling-back-a-bad-static-deploy-in-under-a-minute","Rolling Back a Bad Static Deploy in Under a Minute",{"path":1826,"title":1827},"\u002Fproduction-ready-deployment-cicd-workflows\u002Frollbacks-and-deploy-safety-for-static-sites\u002Frunning-smoke-tests-against-a-preview-url","Running Smoke Tests Against a Preview URL",{"path":1829,"title":1830},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fauditing-npm-dependencies-in-ssg-pipelines","Auditing npm Dependencies in SSG Pipelines",{"path":1832,"title":1833},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fenabling-hsts-and-preload-safely","Enabling HSTS and Preload Safely",{"path":1835,"title":1836},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fhash-based-csp-for-inline-scripts-in-astro","Hash-Based CSP for Inline Scripts in Astro",{"path":1838,"title":1839},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites","Security Headers and Hardening for Static Sites",{"path":1841,"title":1280},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsecuring-deploy-credentials-with-github-oidc",{"path":1843,"title":1844},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fsubresource-integrity-for-third-party-assets","Subresource Integrity for Third-Party Assets",{"path":1846,"title":1847},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fsecurity-headers-for-static-sites\u002Fwriting-a-content-security-policy-for-a-static-site","Writing a Content Security Policy for a Static Site",{"path":1849,"title":1850},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fclean-urls-and-trailing-slashes-on-s3","Clean URLs and Trailing Slashes on S3",{"path":1852,"title":1853},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fcloudfront-functions-for-redirects","CloudFront Functions for Redirects",{"path":1855,"title":1856},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fdeploying-a-static-site-to-s3-and-cloudfront","Deploying a Static Site to S3 and CloudFront",{"path":1858,"title":1859},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites","Self-Hosting Static Sites on S3, Nginx and Caddy",{"path":1861,"title":1862},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-caddy","Serving a Static Site with Caddy",{"path":1864,"title":1865},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fserving-a-static-site-with-nginx","Serving a Static Site with Nginx",{"path":1867,"title":1868},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fself-hosting-static-sites\u002Fzero-downtime-deploys-with-symlink-swaps","Zero-Downtime Deploys with Symlink Swaps",{"path":1870,"title":1871},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fadding-a-contact-form-with-cloudflare-workers","Adding a Contact Form with Cloudflare Workers",{"path":1873,"title":1874},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fhandling-form-submissions-on-a-static-site","Handling Form Submissions on a Static Site",{"path":1876,"title":24},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites",{"path":1878,"title":1294},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fnetlify-functions-vs-cloudflare-workers",{"path":1336,"title":5},{"path":1881,"title":1882},"\u002Fproduction-ready-deployment-cicd-workflows\u002Fserverless-functions-for-static-sites\u002Fproxying-third-party-apis-from-an-edge-function","Proxying Third-Party APIs from an Edge Function",1789722847319]