docs Jun 28, 2026 updated Jun 28, 2026

Privacy and Publication Model

A runbook for keeping public notes safe and understanding what private GitHub repositories do and do not protect.

#privacy #publishing #cloudflare #security
Status
evergreen
Visibility
public
Role Area
IAM / RBAC / secrets
Priority
P0
Confidence
operational
Category
Security
Difficulty
beginner
Published
Jun 28, 2026
Updated
Jun 28, 2026

Core Rule

A private GitHub repository does not make the deployed website private. Once static files are deployed to Cloudflare Pages on a public hostname, those files are public unless the hostname is protected.

Publishing Model

Public production builds include only notes with:

visibility: public
status: published # or evergreen

Private and draft notes must never be routable, indexed by search, emitted into RSS, or included in the sitemap.

What Private GitHub Protects

A private repository protects the source files from unauthenticated GitHub visitors. It does not protect:

  • built HTML already deployed to Cloudflare Pages
  • search index files generated from deployed content
  • RSS or sitemap output
  • cached public pages
  • screenshots or shared URLs

When To Use Cloudflare Access

Use Cloudflare Access when private content is intentionally served at notes.bianrui.net.

Recommended policy:

  • Application: notes.bianrui.net
  • Access: allow only Rui’s identity provider account
  • Content mode: private deployment only
  • Public build guard: still enabled

Public Safety Checklist

  • No credentials, API keys, tokens, or secrets.
  • No internal URLs.
  • No logs, production data, or private customer/user data.
  • No proprietary system diagrams.
  • No unreleased employer code.
  • No employer-specific architecture details.

Public notes should teach transferable engineering principles.

Source Links

Related Notes

Runbooks Jun 28, 2026 P1 beginner

Cloudflare Pages Deployment Runbook

A deployment checklist for publishing the knowledge base to Cloudflare Pages and mapping notes.bianrui.net.

Cheat Sheets Jun 28, 2026 P0 intermediate

Secrets Management Checklist

A checklist for safely handling API keys, database credentials, and service secrets.