Infrastructure Reference · Restricted
🔒
Accounts Overview

Login Credentials Storage

🔐 Credential Storage

Squarespace — login via solaiman@miahgroup.com. Username & password stored in Apple Passwords app.

Cloudflare — login via miahnet@gmail.com. Password managed by Apple Passwords. 2FA via Google Authenticator app.

Domain Setup

Registration & Hosting

Domain Registrar

Squarespace — Domain MiahGroup.com is registered here. Squarespace remains the renewal authority. DNS records were with Squarespace initially (free DNS service), registered with APNIC as the DNS authority for Australia region, which reports to ICANN.

DNS Host

Cloudflare — All DNS records transferred to Cloudflare. Squarespace still owns the domain registration but Cloudflare controls all DNS resolution and provides CDN, WAF, and Workers.

Cloudflare Nameservers

NS Records
april.ns.cloudflare.com
dion.ns.cloudflare.com

Naked Domain — A Records Required

For miahgroup.com (no subdomain) to resolve, you must have Google's IPs as A records. See the Google IPs section.

DNS Records

Current DNS Configuration

TypeNameContent / ValueProxyNotes
Amiahgroup.com216.239.32.21🟠 ProxiedNaked domain → Google Sites
CNAME*ghs.googlehosted.com🟠 ProxiedWildcard — catches all subdomains
CNAMEwwwghs.googlehosted.com🟠 Proxied→ store site
CNAMEstoreghs.googlehosted.com🟠 Proxied→ /store site
CNAMEsolaimanghs.googlehosted.com🟠 Proxied→ /solaiman site
CNAMEadminghs.googlehosted.com⚪ DNS OnlyDNS-only so custom URL shows in browser
R2store.miahgroup.comCloudflare R2 bucket🟠 ProxiedCDN image storage
MXmiahgroup.comsmtp.google.com⚪ DNS OnlyGoogle Workspace email (post-2023)
TXTmiahgroup.comv=spf1 include:_spf…⚪ DNS OnlySPF record for email auth
TXTgoogle._domainkeyv=DKIM1; k=rsa; p=…⚪ DNS OnlyDKIM for email signing
TXTmiahgroup.comgoogle-site-verif…⚪ DNS OnlyGoogle site ownership verification
⚠️
Proxy Status MattersWhen a CNAME is 🟠 Proxied, Cloudflare Workers intercept traffic. When ⚪ DNS Only, requests go directly to Google — Workers are bypassed.
Google Sites

Site Structure

Sites live as files on Google Drive under solaiman@miahgroup.com.

🛒storesites.google.com/miahgroup.com/store
homeaubdmyusuk
👤solaimansites.google.com/miahgroup.com/solaiman
homeaubdmy
🏢corporatesites.google.com/miahgroup.com/corporate
au
⚙️admin→ maps to store site
ℹ️
Pages vs SubdirectoriesThe geo paths (au, bd, my, us) are pages — not real subdirectories. The default/home page is shown to visitors from countries without a dedicated page.

How to Create a New Site

Go to sites.google.com → click + top-left, or copy an existing site.
Give the site a name. Create pages: home, au, bd, my, etc.
Click Publish → enter the custom domain path (e.g. store or solaiman).
In Google Workspace Admin Console → Apps → Google Workspace → Sites → Custom URL → map subdomain to site.
Share: set solaiman@miahgroup.com as owner, miahnet@gmail.com as Published Viewer.
Routing Logic

Traffic Flow

When Cloudflare proxy is ON, the Worker named "router" intercepts all requests and redirects based on the domain and visitor's geo-location.

User requestsRouted toNotes
miahgroup.com…/store/au/A record + Proxied → Worker routes by country
www.miahgroup.com…/store/au/Proxied → Worker active
store.miahgroup.com…/store/au/Proxied → Worker active
solaiman.miahgroup.com…/solaiman/au/Proxied → Worker routes to solaiman site
corporate.miahgroup.com…/corporate/au/Proxied → Worker routes to corporate site
admin.miahgroup.comadmin.miahgroup.com/store⚪ DNS Only → Worker bypassed, custom URL shown
[anything].miahgroup.com…/store/au/Wildcard CNAME catches all others

Country → Page Mapping

Geo Routing

🇦🇺 Australia → /au  ·  🇧🇩 Bangladesh → /bd  ·  🇲🇾 Malaysia → /my  ·  🇺🇸 USA → /us  ·  🇬🇧 UK → /uk

All other countries → default /home page.

Cloudflare Workers

Worker: "router"

Controls all traffic routing across all subdomains.

Deploy / Update

Cloudflare Dashboard → Workers and Pages
Click worker name → Edit CodeCmd+A → Delete → paste new code → Deploy
Rollback: click Deployments next to any past version → Rollback

CDN Images — R2 Bucket

Cloudflare R2

Images stored in a Cloudflare R2 bucket. Custom domain store.miahgroup.com proxied through Cloudflare for CDN delivery.

Email & MX Records

Google Workspace MX Records

Current (Post-2023)

MX Record
smtp.google.com   Priority: 1

Legacy Values (Pre-2023) — Still Supported

  • aspmx.l.google.com
  • alt1.aspmx.l.google.com
  • alt2.aspmx.l.google.com
  • alt3.aspmx.l.google.com
  • alt4.aspmx.l.google.com
⚠️
DNS Transition WarningEmail stops working temporarily during MX record changes. DNS propagation can take up to 48 hours globally.
Known Gotchas

Cloudflare Proxy vs Custom URL

🟠
Proxied (Orange Cloud)
Workers active. CDN + security. Browser shows long Google URL. Custom subdomain URL NOT preserved.
DNS Only (Grey Cloud)
Workers bypassed. Browser shows custom URL. No Cloudflare CDN or Workers.
💡
Custom URL ActivationTemporarily set CNAME to Grey Cloud → wait ~30 min for Google Admin "Active" status → switch back to Orange Cloud.

One Domain, One Account

🚨
Google restriction — Google does not allow one domain mapped to two Google accounts simultaneously. Unmap from old account first.

Worker Must Be Proxied

⚠️
For Workers to intercept traffic, DNS record must be Proxied (Orange Cloud). DNS Only bypasses Workers entirely.
Google IPs — A Records

Required for Naked Domain

Add these as A records (Proxied) in Cloudflare DNS for miahgroup.com:

216.239.32.21
216.239.34.21
216.239.36.21
216.239.38.21

Google Sites CNAME Target

CNAME value for all subdomains
ghs.googlehosted.com
Access & Auth Summary

Full Access Reference

ServiceLogin AccountAuth Method
Squarespace (domain)solaiman@miahgroup.comGoogle OAuth · Apple Passwords
Cloudflaremiahnet@gmail.comPassword (Apple Passwords) + 2FA (Google Auth)
Google Workspace Adminsolaiman@miahgroup.comGoogle OAuth
Google Sitessolaiman@miahgroup.comOwner · Google OAuth
Google Sites (viewer)miahnet@gmail.comPublished Viewer
Google Apps Scriptsolaiman@miahgroup.comAnyone with Google account can access deployed web app