Configure separate preview and production domains

This change establishes clear separation between staging and production
deployments using different Cloudflare Pages branches and custom domains:

Changes:
- Update release-web.yml to deploy to 'release' branch (not 'main')
- Add preview.cambeerfestival.app to worker CORS origins
- Update documentation to reflect new architecture

Architecture:
- Production: cambeerfestival.app (CF Pages 'release' branch, deployed on git tags)
- Preview: preview.cambeerfestival.app (CF Pages 'main' branch, deployed on git main)
- PR Previews: <branch>.cambeerfestival.pages.dev (CF Pages '<branch>' branch)

Next step: Configure custom domains in Cloudflare Dashboard to point:
- cambeerfestival.app → release branch
- preview.cambeerfestival.app → main branch

Author: claude

.github/workflows/release-web.yml

@@ -82,4 +82,4 @@ jobs:
         with:
           apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
           accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
-          command: pages deploy build/web --project-name=cambeerfestival --branch=main
+          command: pages deploy build/web --project-name=cambeerfestival --branch=release

README.md

@@ -6,7 +6,8 @@
 A Flutter app for browsing beers, ciders, meads, and more at the Cambridge Beer Festival.
 
 **Production**: [https://cambeerfestival.app](https://cambeerfestival.app)
-**Staging**: [https://richardthe3rd.github.io/cambridge-beer-festival-app/](https://richardthe3rd.github.io/cambridge-beer-festival-app/)
+**Preview**: [https://preview.cambeerfestival.app](https://preview.cambeerfestival.app)
+**Development**: [https://richardthe3rd.github.io/cambridge-beer-festival-app/](https://richardthe3rd.github.io/cambridge-beer-festival-app/)
 
 ## Features
 
@@ -140,23 +141,25 @@ The app is deployed to multiple environments:
 
 - **Production** (Cloudflare Pages): [cambeerfestival.app](https://cambeerfestival.app)
   - Deployed on version tags (e.g., `v2025.12.0`)
+  - Uses Cloudflare Pages `release` branch
   - Workflow: `.github/workflows/release-web.yml`
-- **Staging** (Cloudflare Pages): `main.cambeerfestival.pages.dev`
-  - Stable preview environment
+- **Preview/Staging** (Cloudflare Pages): [preview.cambeerfestival.app](https://preview.cambeerfestival.app)
+  - Stable staging environment
   - Deployed automatically on push to `main`
+  - Uses Cloudflare Pages `main` branch
   - Workflow: `.github/workflows/build-deploy.yml` (deploy-web-preview job)
 - **Development** (GitHub Pages): [richardthe3rd.github.io/cambridge-beer-festival-app](https://richardthe3rd.github.io/cambridge-beer-festival-app/)
   - Alternative development environment
   - Deployed automatically on push to `main`
   - Workflow: `.github/workflows/build-deploy.yml` (deploy-web job)
 - **PR Previews** (Cloudflare Pages): Unique URL per pull request
-  - Each PR gets its own preview environment
+  - Each PR gets its own preview environment (e.g., `<branch-name>.cambeerfestival.pages.dev`)
   - Preview URL posted as comment on the PR
   - Workflow: `.github/workflows/build-deploy.yml` (deploy-web-preview job)
 
 ### Deployment Strategy
 
-1. **Development changes**: Push to `main` → Staging (Cloudflare) + GitHub Pages updated
+1. **Development changes**: Push to `main` → Preview (Cloudflare) + GitHub Pages updated
 2. **PR reviews**: Open PR → Unique Cloudflare Pages preview created
 3. **Production releases**: Create tag (e.g., `v2025.12.0`) → Production deployment to cambeerfestival.app
 

cloudflare-worker/worker.js

@@ -22,6 +22,7 @@ const FESTIVALS_CACHE_CONTROL = 'no-cache, must-revalidate';
 const ALLOWED_ORIGINS = [
   'https://richardthe3rd.github.io',
   'https://cambeerfestival.app',
+  'https://preview.cambeerfestival.app',
   'http://localhost:8080',
   'http://localhost:3000',
   'http://127.0.0.1:8080',

docs/CLOUDFLARE_PAGES_SETUP.md

@@ -8,10 +8,19 @@ This document explains how to set up Cloudflare Pages deployment for the Cambrid
 
 ## Overview
 
-The app has two deployment targets:
+The app has three deployment targets:
 
-1. **GitHub Pages** (Development/Staging): `richardthe3rd.github.io/cambridge-beer-festival-app/`
-2. **Cloudflare Pages** (Production): `cambeerfestival.app`
+1. **GitHub Pages** (Development): `richardthe3rd.github.io/cambridge-beer-festival-app/`
+2. **Cloudflare Pages Staging** (Preview): `preview.cambeerfestival.app`
+3. **Cloudflare Pages Production**: `cambeerfestival.app`
+
+### Deployment Architecture
+
+| Git Event | Cloudflare Pages Branch | Custom Domain | Purpose |
+|-----------|------------------------|---------------|---------|
+| Pull Request | `<branch-name>` | `<branch-name>.cambeerfestival.pages.dev` | PR previews |
+| Push to `main` | `main` | `preview.cambeerfestival.app` | Staging |
+| Version tag (e.g., `v2025.12.0`) | `release` | `cambeerfestival.app` | Production |
 
 ## Prerequisites
 
@@ -92,24 +101,46 @@ You can reuse the same token by adding Pages permissions to it:
 
 **Note**: Using a single token with both Workers and Pages permissions is simpler and follows the principle of consolidating CI/CD credentials for the same application.
 
-### 4. Configure Custom Domain
+### 4. Configure Custom Domains
+
+You need to set up **two custom domains** pointing to different Cloudflare Pages branches:
+
+#### 4a. Production Domain (cambeerfestival.app)
 
 1. In Cloudflare Dashboard, go to **Workers & Pages** → **Pages**
 2. Select your `cambeerfestival` project
 3. Go to **Custom domains** tab
 4. Click **Set up a custom domain**
 5. Enter: `cambeerfestival.app`
-6. Click **Continue**
-7. Cloudflare will automatically configure the DNS records
-8. Optionally add `www.cambeerfestival.app` as well
+6. **Important**: Select **Branch**: `release` (not `main`)
+7. Click **Continue**
+8. Cloudflare will automatically configure the DNS records
+
+#### 4b. Preview/Staging Domain (preview.cambeerfestival.app)
+
+1. In the same **Custom domains** tab
+2. Click **Set up a custom domain** again
+3. Enter: `preview.cambeerfestival.app`
+4. **Important**: Select **Branch**: `main`
+5. Click **Continue**
+6. Cloudflare will automatically configure the DNS records
+
+#### 4c. Optional: WWW Redirect
+
+If you want `www.cambeerfestival.app` to redirect to the apex domain:
+1. Add `www.cambeerfestival.app` as a custom domain
+2. Select **Branch**: `release`
 
 **DNS Records Created** (automatic):
-- `CNAME cambeerfestival.app` → `cambeerfestival.pages.dev`
-- `CNAME www.cambeerfestival.app` → `cambeerfestival.pages.dev` (if www added)
+- `CNAME cambeerfestival.app` → `cambeerfestival.pages.dev` (points to `release` branch)
+- `CNAME preview.cambeerfestival.app` → `cambeerfestival.pages.dev` (points to `main` branch)
+- `CNAME www.cambeerfestival.app` → `cambeerfestival.pages.dev` (optional, points to `release` branch)
 
 ### 5. Update Cloudflare Worker
 
-The Cloudflare Worker for API proxy has already been updated to allow `https://cambeerfestival.app` in CORS origins.
+The Cloudflare Worker for API proxy has already been updated to allow both custom domains in CORS origins:
+- `https://cambeerfestival.app` (production)
+- `https://preview.cambeerfestival.app` (staging)
 
 When you deploy worker changes:
 
@@ -407,13 +438,14 @@ Both should remain in free tier unless app sees very high traffic.
 - [ ] Cloudflare Pages project `cambeerfestival` created
 - [ ] Cloudflare Account ID obtained
 - [ ] Cloudflare API Token updated with **both** Workers Scripts + Pages permissions
-- [ ] Custom domain `cambeerfestival.app` configured in Cloudflare Pages
+- [ ] Custom domain `cambeerfestival.app` configured → points to `release` branch
+- [ ] Custom domain `preview.cambeerfestival.app` configured → points to `main` branch
 - [ ] DNS records configured (automatic via Cloudflare)
 - [ ] GitHub Secret `CLOUDFLARE_API_TOKEN` verified (should work for both Workers and Pages)
 - [ ] GitHub Secret `CLOUDFLARE_ACCOUNT_ID` added
 - [ ] GitHub Secret `GOOGLE_SERVICES_JSON` verified
 - [ ] Workflow files committed (`.github/workflows/release-web.yml` and `build-deploy.yml`)
-- [ ] Cloudflare Worker updated with `cambeerfestival.app` CORS origin and wildcard for Pages previews
-- [ ] Push to `main` triggers successful deployment to staging
+- [ ] Cloudflare Worker updated with both custom domains in CORS origins
+- [ ] Push to `main` triggers successful deployment to `https://preview.cambeerfestival.app`
 - [ ] Create tag triggers production deployment to `https://cambeerfestival.app`
 - [ ] API calls work without CORS errors on all environments