Reset branch to main

2026-11-13 01:54:00 +01:00 · 2026-03-09 17:02:30 +01:00
1 parent 68343a4c9a
commit e474d11730
@@ -0,0 +1,154 @@
+# Deploy to Cloudflare Pages
+
+[Cloudflare Pages](https://pages.cloudflare.com) offers fast, global static site hosting with unlimited bandwidth.
+
+## Quick Deploy
+
+1. Go to [Cloudflare Pages](https://dash.cloudflare.com/?to=/:account/pages)
+2. Click "Create a project"
+3. Connect your GitHub repository
+
+## Build Configuration
+
+| Setting                | Value           |
+| ---------------------- | --------------- |
+| Framework preset       | None            |
+| Build command          | `npm run build` |
+| Build output directory | `dist`          |
+| Root directory         | `/`             |
+
+## Environment Variables
+
+Add these in Settings → Environment variables:
+
+| Variable                | Value                                      |
+| ----------------------- | ------------------------------------------ |
+| `NODE_VERSION`          | `18`                                       |
+| `SIMPLE_MODE`           | `false` (optional)                         |
+| `VITE_BRAND_NAME`       | Custom brand name (optional)               |
+| `VITE_BRAND_LOGO`       | Logo path relative to `public/` (optional) |
+| `VITE_FOOTER_TEXT`      | Custom footer/copyright text (optional)    |
+| `VITE_DEFAULT_LANGUAGE` | Default UI language, e.g. `fr` (optional)  |
+
+## Configuration File
+
+Create `_headers` in your `public` folder:
+
+```
+# Required security headers for SharedArrayBuffer (used by LibreOffice WASM)
+/*
+  Cross-Origin-Embedder-Policy: require-corp
+  Cross-Origin-Opener-Policy: same-origin
+  Cross-Origin-Resource-Policy: cross-origin
+
+# Pre-compressed LibreOffice WASM binary
+/libreoffice-wasm/soffice.wasm.gz
+  Content-Type: application/wasm
+  Content-Encoding: gzip
+  Cache-Control: public, max-age=31536000, immutable
+
+# Pre-compressed LibreOffice WASM data
+/libreoffice-wasm/soffice.data.gz
+  Content-Type: application/octet-stream
+  Content-Encoding: gzip
+  Cache-Control: public, max-age=31536000, immutable
+
+# Cache WASM files aggressively
+/*.wasm
+  Cache-Control: public, max-age=31536000, immutable
+  Content-Type: application/wasm
+
+# Service worker
+/sw.js
+  Cache-Control: no-cache
+```
+
+::: warning Important
+The `Cross-Origin-Embedder-Policy` and `Cross-Origin-Opener-Policy` headers are required for Word/ODT/Excel/PowerPoint to PDF conversions. Without them, `SharedArrayBuffer` is unavailable and the LibreOffice WASM engine will fail to initialize.
+:::
+
+Create `_redirects` for SPA routing:
+
+```
+/*    /index.html   200
+```
+
+## Custom Domain
+
+1. Go to your Pages project
+2. Click "Custom domains"
+3. Add your domain
+4. Cloudflare will auto-configure DNS if the domain is on Cloudflare
+
+## Advantages
+
+- **Free unlimited bandwidth**
+- **Global CDN** with 300+ edge locations
+- **Automatic HTTPS**
+- **Preview deployments** for pull requests
+- **Fast builds**
+
+## Troubleshooting
+
+### Large File Uploads
+
+Cloudflare Pages supports files up to 25 MB. WASM modules should be fine, but if you hit limits, consider:
+
+```bash
+# Split large files during build
+npm run build
+```
+
+### Worker Size Limits
+
+If using Cloudflare Workers for advanced routing, note the 1 MB limit for free plans.
+
+## CORS Proxy Worker (For Digital Signatures)
+
+The Digital Signature tool requires a CORS proxy to fetch certificate chains. Deploy the included worker:
+
+```bash
+cd cloudflare
+npx wrangler login
+npx wrangler deploy
+```
+
+### Security Features
+
+| Feature                 | Description                    |
+| ----------------------- | ------------------------------ |
+| **URL Restrictions**    | Only certificate URLs allowed  |
+| **File Size Limit**     | Max 10MB per request           |
+| **Rate Limiting**       | 60 req/IP/min (requires KV)    |
+| **Private IP Blocking** | Blocks localhost, internal IPs |
+
+### Enable Rate Limiting
+
+```bash
+# Create KV namespace
+npx wrangler kv namespace create "RATE_LIMIT_KV"
+
+# Add to wrangler.toml with returned ID:
+# [[kv_namespaces]]
+# binding = "RATE_LIMIT_KV"
+# id = "YOUR_ID"
+
+npx wrangler deploy
+```
+
+### Build with Proxy URL
+
+```bash
+VITE_CORS_PROXY_URL=https://your-worker.workers.dev npm run build
+```
+
+Or with Docker:
+
+```bash
+export VITE_CORS_PROXY_URL="https://your-worker.workers.dev"
+DOCKER_BUILDKIT=1 docker build \
+  --secret id=VITE_CORS_PROXY_URL,env=VITE_CORS_PROXY_URL \
+  -t your-bentopdf .
+```
+
+> **Note:** See [README](https://github.com/alam00000/bentopdf#digital-signature-cors-proxy-required) for HMAC signature setup.