readme update

Author: vahidlazio

confidence-cloudflare-resolver/deployer/README.md

@@ -2,35 +2,42 @@
 
 Docker container used to deploy the Confidence Rust resolver to CloudFlare.
 
-# Build the image
+## Build
 
 From the **root of the repository**, run:
 
-```
-docker build -f confidence-cloudflare-resolver/deployer/Dockerfile -t <YOUR_IMAGE_NAME> .
+```bash
+docker build --target confidence-cloudflare-resolver.deployer -t cloudflare-deployer .
 ```
 
-# Usage
+## Usage
 
-```
+Only 2 environment variables are required:
+
+```bash
 docker run -it \
-	-e CLOUDFLARE_API_TOKEN='<>' \
-	-e CONFIDENCE_CLIENT_SECRET='<>' \
-	image-name
+    -e CLOUDFLARE_API_TOKEN='<your-cloudflare-api-token>' \
+    -e CONFIDENCE_CLIENT_SECRET='<your-confidence-client-secret>' \
+    cloudflare-deployer
 ```
 
-The following are automatically detected:
-- **Cloudflare account ID**: Detected from the API token. If the token has access to multiple accounts, you must set `CLOUDFLARE_ACCOUNT_ID` explicitly.
-- **Resolver state**: Fetched from the Confidence CDN using a SHA256 hash of your client secret.
-- **Resolver URL**: Detected using the Cloudflare API to check the current deployment's etag and avoid unnecessary re-deploys.
-
-Additional optional variables:
-- CLOUDFLARE_ACCOUNT_ID: Required only if the API token has access to multiple accounts;
-- RESOLVE_TOKEN_ENCRYPTION_KEY: AES-128 (16 bytes) key, base64 encoded. Used internally in the resolver. Defaults to empty if not set;
-- CONFIDENCE_RESOLVER_STATE_URL: Point to a custom resolver state URL (overrides CDN);
-- CONFIDENCE_RESOLVER_ALLOWED_ORIGIN: Configure allowed origins in the wrangler used to deploy the resolver;
-- FORCE_DEPLOY: Re-deploy the resolver worker, regardless if the state is detected as changed or not.
-
-# Sticky Assignments
-Sticky assignments are currently not supported with the CloudFlare resolver.
-If a flag with sticky assignment rules is encountered, it is ignored by the resolver and the evaluation will return a "flag not found".
+Everything else is automatically detected:
+- **Cloudflare account ID**: Detected from the API token (fails with helpful message if token has access to multiple accounts)
+- **Resolver state**: Fetched from Confidence CDN using SHA256 hash of your client secret
+- **Resolver URL**: Detected from Cloudflare API to check etag and avoid unnecessary re-deploys
+
+## Optional Variables
+
+| Variable | Description |
+|----------|-------------|
+| `CLOUDFLARE_ACCOUNT_ID` | Required only if the API token has access to multiple accounts |
+| `CONFIDENCE_RESOLVER_STATE_URL` | Custom resolver state URL (overrides CDN) |
+| `CONFIDENCE_RESOLVER_ALLOWED_ORIGIN` | Configure allowed origins for CORS |
+| `RESOLVE_TOKEN_ENCRYPTION_KEY` | AES-128 key (base64 encoded) used to encrypt resolve tokens when `apply=false`. Not needed since the resolver defaults `apply` to `true` |
+| `FORCE_DEPLOY` | Force re-deploy regardless of state changes |
+| `NO_DEPLOY` | Build only, skip deployment |
+
+## Sticky Assignments
+
+Sticky assignments are not currently supported with the CloudFlare resolver.
+Flags with sticky assignment rules will return "flag not found".