01
Module 01 · Infrastructure & DNS

Laying the Ground

Nothing gets built in the air. Cloudflare and GitHub go in first — every system, every deployment, every piece of the stack lands on top of what we establish here.

Sprint Day
Day 01
Tools
Cloudflare · GitHub
Est. Build Time
2–3 Hours
Scroll
01
Chapter 01

Why These Two Go First

There's a temptation to start building the exciting stuff first — the RAG, the agents, the course experience. Resist it. The two tools in this module are invisible when they work and catastrophic when they're missing. They are the ground everything else stands on.

Cloudflare manages every domain in the Cyber Coastlines ecosystem, routes traffic intelligently, and sits as the security perimeter in front of every web property. GitHub is the version control layer — every workflow, prompt template, configuration file, and custom integration built during this sprint gets committed here. If it isn't in GitHub, it doesn't exist.

Together these two tools answer a question that most solo operators never think to ask until something breaks: if the laptop is lost, if the consultant is unreachable, if something fails at 2am — does the system know how to recover? After this module, the answer is yes.

Infrastructure is the work nobody sees. It's also the work that determines whether everything else survives contact with reality.

Cyber Blueprint · Operating Principle
02
Chapter 02

Cloudflare — The Front Door

Tool 01 of 02
Cloudflare
DNS · CDN · Security · Domain Management

Cloudflare sits in front of everything. It manages DNS for all six ecosystem domains — the .ai extensions for systems and methodology, the .com extensions for brands and stories. Every request that hits any Cyber Coastlines web property passes through Cloudflare first.

That means faster load times globally through CDN caching, DDoS protection without configuration, and a single control panel for the entire domain hierarchy. When the RAG intelligence layer goes live in Module 02, Cloudflare also acts as the access control layer — ensuring that the vault is never exposed directly to the public internet regardless of which hosting path the consultant recommends.

The free tier covers everything this ecosystem needs indefinitely. This is one of the rare tools in the stack where the free tier is genuinely, completely sufficient. There is no reason to pay for Cloudflare Pro at this stage of growth.

Cloudflare Setup Checklist
[ ]
Create Cloudflare account
Free tier. Use the 0300.ai admin email — not a personal address.
[ ]
Add all six ecosystem domains
Transfer DNS management for each domain. Cloudflare will scan existing records automatically.
[ ]
Enable SSL/TLS on all domains
Set to Full (Strict) mode. Every domain serves HTTPS only — no exceptions.
[ ]
Configure security level
Set to Medium. Enables basic bot protection without blocking legitimate traffic.
[ ]
Point primary domains to Ghost Pro
A records and CNAME configured. Test each domain resolves correctly before proceeding.
[ ]
Document all DNS records
Export and commit the full DNS configuration to GitHub before leaving this module.
03
Chapter 03

GitHub — The Memory

Tool 02 of 02
GitHub
Version Control · Deployment · Sprint Archive

GitHub is the institutional memory of the sprint. Every piece of code, every configuration file, every prompt template, every workflow diagram, every SOP — if it was built during these eight days, it lives in GitHub. Permanently. With full version history.

This isn't a developer preference. It's a non-negotiable operational requirement. The entire point of this sprint is to build systems the founder can run independently. That requires documentation that doesn't disappear when the consultant leaves. GitHub guarantees that continuity.

All repositories must be set to private before any code is committed. No exceptions. The ecosystem IP and system architecture are proprietary — they do not belong in a public repository under any circumstance, regardless of how harmless an individual file might seem.

GitHub Setup Checklist
[ ]
Create or access organization account
Under the Cyber Coastlines LLC entity — not a personal GitHub account.
[ ]
Create sprint repository — cyber-blueprint-sprint
Set to private immediately. This repo holds all sprint deliverables.
[ ]
Create vault repository — ecosystem-vault-config
Private. Holds RAG configuration, LlamaIndex settings, ingestion pipeline scripts.
[ ]
Create workflow repository — esuite-workflows
Private. All Lindy agent configurations, prompt templates, and automation logic.
[ ]
Set default branch protection rules
Require pull request review before merging to main. Prevents accidental overwrites.
[ ]
Commit Cloudflare DNS documentation
First commit of the sprint. DNS records, domain map, and account access instructions.
[ ]
Add founder as collaborator with admin access
Founder owns every repository. Consultant is a collaborator — not the owner.
04
Chapter 04

How They Connect

Cloudflare and GitHub don't directly talk to each other — but they work together as the two load-bearing walls of the entire stack. Everything else in the Cyber Blueprint touches one or both of them at some point in its lifecycle.

Cloudflare manages DNS for all domains. When Ghost Pro goes live in Module 04, the domain points there through Cloudflare. When the RAG intelligence layer goes live in Module 02, Cloudflare controls who can access it.
GitHub stores everything built during the sprint. Every module produces a commit. By day eight, the entire ecosystem is version-controlled and recoverable from a fresh machine in under an hour.
Netlify connects both. It pulls from GitHub repositories and deploys through Cloudflare's DNS. This creates a one-push deployment pipeline — code committed to GitHub automatically deploys to the live web property.
The vault connects to GitHub. LlamaIndex ingestion scripts, Supabase configuration, and Claude API prompt templates are all stored and versioned in GitHub. If the vault ever needs to be rebuilt from scratch, everything required to do it lives in the repository.
Before Leaving This Module
The Non-Negotiable

Module 01 is not complete until two things are true: every ecosystem domain resolves correctly through Cloudflare, and the first commit has been pushed to the sprint repository in GitHub. Do not begin Module 02 until both are confirmed. The vault requires a functional DNS layer and a version-controlled environment before the first line of RAG architecture is written.

End of Module 01
The Ground Is Laid.

Module 02 is where it gets interesting. The vault goes in next — and everything that follows depends on getting it right.