Nothing is shown until every request is signed by Cloudflare Access. To finish setup (about 3 minutes, free):
- Cloudflare dashboard → Zero Trust. If asked, pick a team name (for example
axu) and the Free plan. - Access → Applications → Add an application → Self-hosted. Domain:
admin.axu.network. - Add a policy: Action Allow, Include Emails = your admin email(s). Login method: One-time PIN (default).
- Copy the application's Audience (AUD) tag and your team domain (
yourteam.cloudflareaccess.com) and set them as ACCESS_AUD and ACCESS_TEAM_DOMAIN on the axu-admin Worker.