ci: build nxdns.sh and deploy it as a cloudflare worker with static assets

website/PLAN.md

@@ -9,8 +9,8 @@ Convince, then teach. A marketing front page sells the project; the docs sit one
 ## Domain and hosting
 
 - Domain: `nxdns.sh` (already owned).
-- Host: Cloudflare Pages.
-- Deploy: Gitea Actions builds the site on push to master, then `wrangler` uploads the output. A Cloudflare API token lives as a Gitea secret. (Cloudflare Pages has no Gitea integration, so direct upload is the mechanism.)
+- Host: Cloudflare, as a Worker serving the built site as static assets (`website/wrangler.jsonc`, which also binds the `nxdns.sh` custom domain). Cloudflare has folded Pages into Workers: wrangler's Pages commands now delegate to `wrangler deploy`.
+- Deploy: `.gitea/workflows/site.yml` builds the site on push to master and runs `wrangler deploy`. The Cloudflare API token is the Gitea secret `CLOUDFLARE_API_TOKEN`, and the account id the variable `CLOUDFLARE_ACCOUNT_ID`. Cloudflare has no Gitea integration, so CI uploads directly.
 
 ## Stack and layout
 

website/wrangler.jsonc

@@ -0,0 +1,17 @@
+// nxdns.sh: the built site, served as a Worker's static assets. Cloudflare has
+// folded Pages into Workers, and its Pages commands now delegate here. CI deploys
+// it with `wrangler deploy` (.gitea/workflows/site.yml).
+{
+	"name": "nxdns-site",
+	"compatibility_date": "2026-10-06",
+	"assets": {
+		"directory": "./dist",
+		// Astro writes every page as <route>/index.html and links them with a
+		// trailing slash; a missing page gets Starlight's 404.html with a 404.
+		"html_handling": "auto-trailing-slash",
+		"not_found_handling": "404-page",
+	},
+	"routes": [{ "pattern": "nxdns.sh", "custom_domain": true }],
+	"workers_dev": false,
+	"preview_urls": false,
+}