Add production blog Worker workflow

2026-09-02 10:51:23 -04:00
parent 954b230d05
commit 5c59430b86
6 changed files with 103 additions and 5 deletions
@@ -0,0 +1,40 @@
+# Blog production Worker runbook
+
+## Scope and safety boundary
+
+This runbook moves only `blog.3031023.xyz` from the independent preview Worker
+to the independent static production Worker `3031023-xyz-blog`. It does not
+change the primary site, the Pages rollback project, DNS records, redirects,
+forms, n8n, onboarding, CMS, or client-editing boundaries.
+
+The routine workflows deploy static assets only:
+
+- relevant `main` changes deploy `3031023-xyz-blog` in production mode;
+- relevant non-`main` changes deploy `3031023-xyz-blog-preview` in preview
+  mode; and
+- neither workflow can create, remove, or alter custom domains, DNS, routes,
+  or redirects.
+
+## Pre-cutover verification
+
+1. Record the production Worker version and verify its `workers.dev` URL.
+2. Confirm the journal home page and all published post pages return 200.
+3. Confirm a nonexistent post returns the static 404.
+4. Confirm production metadata is indexable, `robots.txt` allows crawling, and
+   the sitemap lists the journal and published posts.
+5. Confirm the preview Worker remains untouched and its current deployment is
+   available as the immediate blog rollback target.
+
+## Domain move (requires separate approval)
+
+1. Remove `blog.3031023.xyz` from `3031023-xyz-blog-preview`; do not delete
+   that Worker or its deployment history.
+2. Attach `blog.3031023.xyz` to `3031023-xyz-blog` as its only custom domain.
+3. Re-run the public verification checks against the hostname.
+
+## Rollback
+
+1. Remove `blog.3031023.xyz` from `3031023-xyz-blog`.
+2. Reattach it to the unchanged `3031023-xyz-blog-preview` Worker.
+3. Verify the preview Worker’s known-good deployment at the hostname. The
+   preview build will intentionally return to its no-index behavior.