Cloudflare Pages best practices: engineering conventions for production
Field-tested Cloudflare Pages practices from production, avoiding the common anti-patterns.
On this page
Quick answer
How do I pin Cloudflare Pages and Workers runtime versions?
Use compatibility_date in wrangler.toml to lock the runtime behavior. Validate any bump on a Preview branch first so breaking changes never reach production.
Machine-readable page data: /data/cloudflare-pages-best-practices.json
In-depth analysis
Cloudflare Pages watches your Git branch, builds on every commit, and atomically publishes the result to the global edge — zero-ops static hosting. Production engineering conventions revolve around "single source of truth + explicit boundaries", steering clear of the common anti-patterns.
# public/_headers — security headers ride with static assets (Cloudflare convention)
/*
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=63072000; includeSubDomains
X-Frame-Options: DENY
Referrer-Policy: strict-origin-when-cross-originCloudflare Pages Best Practices · Key takeaways
- Config centralized in a single source
- CI uses --frozen-lockfile
- Secrets are placeholders, never real values in code
- Docs and code live in separate places
FAQ & pitfalls
How do I precisely invalidate Cloudflare edge cache?
Static assets get immutable with a long max-age, HTML gets must-revalidate. Change the filename, change the URL — Cloudflare picks up the new version automatically.
Explore the hub
See all 5 guides in Hands-onSame category as this article, sorted across the codebase.
Astro best practices: engineering conventions for production
Field-tested Astro practices from production, avoiding the common anti-patterns.
Astro deployment guide: zero-ops edge publishing with Cloudflare Pages
Git-driven Astro deployment in practice: commit to build, atomic publish to every edge node.
Astro performance tuning: push first paint and edge response to the limit
Around Astro's real bottlenecks, an actionable LCP / INP / CLS checklist.
Astro hands-on tutorial: from zero to your first runnable project
Step-by-step walkthrough of Astro with copy-paste commands, directory layout, and a first runnable artifact.
Share & save
What readers are asking
Questions that keep coming back in reader feedback, already answered.
- 01
Why are _headers / _redirects not taking effect?
Both files must sit at the root of the output directory (dist/); anything under src/ is never uploaded. A purely static project should not add _worker.js either — that gives up the zero-cold-start advantage.
See the full guide → - 02
How do I invalidate the Cloudflare edge cache precisely?
Give static assets a long immutable max-age and serve HTML with must-revalidate. Changing a filename changes the URL, so Cloudflare fetches the new version automatically.
See the full guide → - 03
Why is my Astro component's interactivity not working?
Components ship as zero-JS HTML by default, so an interactive one needs a client:* directive (client:load, client:visible, …). Without it the script is never bundled into the page.
See the full guide →