Amagansett AK Cloudflare Access removal — 2026-08-27 16:42 EDT

Removed the Cloudflare Access application protecting the branded ak.amagansett.app hostname at Rich's explicit direction, making that one prototype publicly reachable while preserving the remaining Amagansett privacy boundaries.

Scope

• Execution host: rdmsm4x.
• Cloudflare account: eastcoastscience.
• Target hostname: ak.amagansett.app only.
• Deleted Access application: Amagansett private - ak.amagansett.app.
• Deleted application ID: e228119a-c3d2-4a6e-8086-281b6794d28c.

Change

• Opened Cloudflare One → Access controls → Applications.
• Verified the target application destination was exactly ak.amagansett.app with owner-only policy.
• After Rich's final confirmation, used the application's Delete flow and confirmed Delete application.
• Cloudflare reported Application successfully deleted; the visible application count changed from 14 to 13.
• Did not change the AK Worker, Pages project, DNS, Zaraz/GA4, source code, other hostnames, or other Access applications.

Verification

Commands run, with redirect query data excluded from this record:

curl -sS -o /dev/null -w '%{http_code}' --max-time 20 https://ak.amagansett.app
curl -sS --max-time 20 -D - -o /dev/null https://ak.amagansett.app
curl -sS --max-time 20 https://ak.amagansett.app | rg -o '<title>[^<]+'
curl -sS -I --max-time 20 <remaining Amagansett hostname>

Observed results:

• ak.amagansett.app: HTTP 200, text/html, title AK · Hamptons Home Search; no Cloudflare Access redirect.
• amagansett.app: HTTP 302 to Cloudflare Access.
• forst.amagansett.app: HTTP 302 to Cloudflare Access.
• preview.amagansett.app: HTTP 302 to Cloudflare Access.
• api.amagansett.app: HTTP 302 to Cloudflare Access.
• amagansett-ak.pages.dev: HTTP 302 to Cloudflare Access.
• Public AK response still emits X-Robots-Tag: noindex, nofollow, noarchive, no-store, no-referrer, nosniff, and a restrictive CSP.

Files touched

• /Users/richh/dev/_handoff/codex-out/amagansett-zaraz-ga4-handoff-20260827/README.md
• /Users/richh/dev/LLM/Claude/changelogs/rdmsm4x-changelog-20260827-1642-amagansett-ak-access-removed.md

No file in /Users/richh/dev/sites/amagansett-app was modified.

Undo

The deleted application is not recoverable through a simple enable switch. To restore authentication, recreate a self-hosted Access application for public hostname ak.amagansett.app, attach an owner-only allow policy, then verify an unauthenticated request returns a Cloudflare Access login redirect. Do not infer restoration from dashboard configuration alone.

Outstanding owner action

• None for the requested removal.
• The branded AK prototype is intentionally public but remains noindex. Reconsider or restore Access before exposing private data, provider credentials, or owner-only features.