portfolio

Aryan Pandya Portfolio

A production-ready portfolio built for Cloudflare Pages and Cloudflare Workers.

Stack

• Next.js static export for the frontend
• Cloudflare Pages for hosting
• Cloudflare Worker for /contact, /resume, and /health
• Cloudflare R2 for private resume and asset storage
• Cloudflare D1 for contact submissions
• Cloudflare Turnstile for contact form protection
• Cloudflare Web Analytics for privacy-friendly analytics

Local setup

1. Install dependencies:

   npm install
   

2. Copy .env.example to .env.local and fill in:

   • NEXT_PUBLIC_SITE_URL
   • NEXT_PUBLIC_API_BASE_URL
   • NEXT_PUBLIC_TURNSTILE_SITE_KEY
   • NEXT_PUBLIC_CF_WEB_ANALYTICS_TOKEN

3. Copy worker/.dev.vars.example to worker/.dev.vars and add:

   • TURNSTILE_SECRET_KEY

4. Start the frontend:

   npm run dev
   

5. Start the Worker in a second terminal:

   npm run worker:dev
   

Cloudflare setup

Pages

• Create a Pages project from this repository.
• Build command: npm run build
• Output directory: out
• Add the same public environment variables used in .env.local.
• Point the custom domain to aryan.nexoraonesolution.com.

Worker

• Create an R2 bucket named portfolio-assets.
• Create a D1 database named aryan-portfolio-db.
• Replace the placeholder D1 IDs in worker/wrangler.toml.

• Add the secret:

  wrangler secret put TURNSTILE_SECRET_KEY --config worker/wrangler.toml
  

• Deploy the Worker:

  npm run worker:deploy
  

• Bind the Worker route or custom domain to portfolio-api.nexoraonesolution.com.

D1 schema

Run the initial migration after creating the database:

npm run db:migrate:remote

Resume upload

The Worker expects the file at resume/aryan-pandya-resume.pdf in the private R2 bucket. Place the final PDF at assets/resume/aryan-pandya-resume.pdf before uploading.

Upload the bundled resume file with:

npm run r2:upload:resume

Recommended production controls

• Enable Cloudflare Web Analytics on the Pages project.
• Enable SSL, Brotli, Auto Minify, and caching defaults in Cloudflare.
• Turn on WAF and bot protection for the site and API subdomains.
• Add a Cloudflare rate limiting rule in front of POST /contact as an extra defensive layer.

Verification

• npm run build
• npm run typecheck
• npm run worker:typecheck