Fix “Turnstile verification failed” on Cloudflare (403): complete checklist Seeing turnstile verification failed, turnstile has not verified, or failed to verify cloudflare turnstile token? Fix 403 errors with key pairing, hostname checks, and siteverify debugging. Blog
Notes on platform engineering, systems architecture, and practical dev workflows.
March 2026
- Fix “Turnstile verification failed” on Cloudflare (403): complete checklist Seeing turnstile verification failed, turnstile has not verified, or failed to verify cloudflare turnstile token? Fix 403 errors with key pairing, hostname checks, and siteverify debugging.
February 2026
-
Fix Astro dev port conflicts and stale pages A practical reset flow for Astro when localhost ports keep changing and pages show stale content. -
Local .dev.vars vs production secrets for Astro on Workers Keep Turnstile, Resend, and NASA keys out of git while still running contact and APOD flows locally with Wrangler. -
NASA APOD on the home page without blocking first paint Fetch APOD at build time, ship static JSON and WebP, and let the home page apply the background after paint—no runtime NASA calls on the Worker.
January 2026
-
Build-time WebP heroes with Astro and Cloudflare compile mode Move blog hero images into the content collection, generate WebP at build time, and skip runtime /cdn-cgi/image URLs in markup. -
Astro secrets on Cloudflare Workers without leaking to the client A small readEnv helper that checks cloudflare:workers env first, then Astro env, so Turnstile and Resend work in production and locally. -
Why Cloudflare Worker logs only show some routes Static assets bypass your Worker on purpose. Here is how prerendered dist/client output maps to what you see in observability on Astro 6 + Cloudflare.