Secrets

  • pulumi config set cloudflare:apiToken --secret … — Cloudflare API token

  • pulumi config set cloudflareZoneId … — zone id for foodtrucknerdz.com

  • Optional: dmarcRua, dmarcPolicy (default none)

Never commit tokens or SMTP/API keys. Prefer Pulumi ESC for team sharing when available.

App secrets (RESEND_API_KEY, etc.) stay in Vercel/Convex env — not this repo.