Deep Dive
12 min readCloudflare API token permissions, explained
The exact scopes Flowmails needs, the principle of least privilege, and the audit trail you can show your security reviewer.
Self-hosted · CFFlowmails
Runtime v0.1
Journal
Operator notes on Cloudflare-native email.
Long-form writing about self-hosted email in D1, Workers-native routing, the REST API, and the parts of the platform that show up in the security review.
Categories
Tags
alternativeamazon-sesapiauditautomationcatch-allcloudflarecloudflare-apicloudflare-email-routingcloudflare-workerscompliancecostcustom-domaincutoverd1data-residencydata-sovereigntydeep-divedeliverabilitydkimdmarcemail-routingemail-servicesemail-webhookhelpdeskhmacinboundleast-privilegelimitationsliteral-matchersmail-servermailgunmigrationmulti-tenantpostfixpostmarkpricingproduct-overviewr2resendrest-apiretryroute-tablesruntimescoped-tokenssecurityself-hostedsendsendgridspfsupportsupport-inboxtcotickettransactional-emailtutorialvendor-lock-inwebhookwebhooks
7 of 22 posts match
Deep Dive
7 min readSelf-hosting your email data in Cloudflare D1 (no vendor lock-in)
The architectural case for putting inbox and outbox in your own D1 database, and what that means in practice for compliance, exports, and exit plans.
Deep Dive
8 min readHow Workers-native email routing actually processes your inbound mail
A tour of the runtime: Email Routing, the Worker, the R2 bucket for attachments, and the D1 tables behind a single inbound message.
Deep Dive
10 min readCloudflare Email Routing alternative: the parts that need a layer on top
Cloudflare Email Routing is the world's best front door for inbound mail. It isn't a database, an inbox UI, a REST API, or a send path. Here's what you add — and why the answer is a self-hosted Worker, not another SaaS.
Deep Dive
13 min readTransactional email pricing on Cloudflare — the full TCO picture
Transactional-email pricing splits into per-email fees (Resend, SendGrid, Mailgun, SES), bundled tiers (Postmark Pro), and flat platform fees (Cloudflare-native stacks like Flowmails). Here's the same-volume comparison.
Deep Dive
13 min readCloudflare Workers email cost — Workers + Email Services + D1 + R2
Cloudflare's email path runs through four primitives that each bill separately. Here's how Workers per-request, Email Services per-email, D1 read/write/storage, and R2 storage / operations stack up — and how to keep the bill predictable.
Deep Dive
8 min readMulti-tenant support inbox on Cloudflare — per-tenant routing & metadata
Run support@, billing@, and abuse@ inboxes across tenants on a single Cloudflare Worker. Per-tenant routing, metadata injection, webhooks, and the D1 schema to back it.