Infrastructure

Status: Active Owner: @bilal @deen Last Updated: 2026-02-24

Current State

Live Services

Service	URL	Hosting
Marketing Site	https://ehq.tech	Cloudflare Pages (Astro + React)
Dashboard	https://app.ehq.tech	Cloudflare Workers (via @opennextjs/cloudflare)
Knowledge Base	https://brain.ehq.tech	Cloudflare Pages (Quartz)
Database	Supabase Cloud	Managed PostgreSQL 16 + pgvector
Auth	Supabase Auth	SSR, JWT
Storage	Supabase Storage	Issue attachments, documents
Analytics	PostHog Cloud EU	Cookieless mode, Frankfurt

Local Development Stack

Service	URL
Application	http://localhost:3000
Supabase API	http://127.0.0.1:54321
Supabase Studio	http://127.0.0.1:54323
PostgreSQL	127.0.0.1:54322
Inbucket (email)	http://127.0.0.1:54324

Requires: Docker 24+, Node.js, pnpm, Supabase CLI.

Production Stack

Component	Service	Notes
Dashboard hosting	Cloudflare Workers	Next.js via @opennextjs/cloudflare
Connection pooling	Cloudflare Hyperdrive	Pooled connection to Supabase Postgres
Auth gate (ZTNA)	Cloudflare Access	Email OTP for team members
Knowledge base	Cloudflare Pages	Quartz static site
Database	Supabase Cloud	Managed PostgreSQL 16 + pgvector
Auth	Supabase Auth	SSR, JWT
Storage	Supabase Storage	Issue attachments, documents
DNS	Cloudflare	ehq.tech zone
Marketing site	Cloudflare Pages	Astro static build at ehq.tech
Analytics	PostHog Cloud EU	Cookieless mode, Frankfurt
IaC	Terraform Cloud	Workspaces: dashboard-prod, ehq-brain, marketing-prod
CI/CD	GitHub Actions	Build, deploy, Terraform plan/apply
Domain	ehq.tech	See Domain & Email Setup
Error tracking	Sentry (planned)
Uptime	UptimeRobot (planned)

Deployment Checklist

• Supabase cloud project created
• Migrations applied to cloud
• Cloudflare Workers project configured
• Hyperdrive connection pool configured
• Wrangler secrets set (API keys, service role key, etc.)
• DNS pointing to Workers (app.ehq.tech)
• Cloudflare Access (ZTNA) configured
• Environment variables configured
• Health check endpoint (/api/health)
• Error monitoring (Sentry)
• Production secrets rotated

Environments

Environment	Purpose
dev	Local development
prod	Production (Cloudflare Workers)

No staging initially. Minimal pipeline approach.

Status

Completed

• ehq.tech — Cloudflare Pages marketing site (Astro + React, Terraform DNS)
• brain.ehq.tech — Cloudflare Pages + Access (Terraform)
• app.ehq.tech — Cloudflare Workers + Access (Terraform)
• Supabase Cloud project provisioned
• Hyperdrive connection pool configured

In Progress

• CI/CD hardening (smoke tests, rollback)
• Sentry error tracking integration
• UptimeRobot monitoring

Planned

• Remove ZTNA when going public (delete Access app + policy via Terraform)
• Staging environment

Monitoring (Planned)

Layer	Tool
Uptime	UptimeRobot
Errors	Sentry
Audit	Database (built-in)
Cron health	Cronitor