Shopify
Shopify Inc. · ecommerce
Critical
Advanced
The platform that runs www.fuzzywumpets.com. Holds product catalog, customers, orders, inventory, POS register. Everything customer-facing flows through here.
If it goes away: Storefront offline. Orders stop. POS stops. Your business is effectively dark.
Live
Fuzzywumpets · Advanced plan · USD
API throttle: 3998/4000 available · 0.05% used
Cost
Monthly$399
Annual$4,788
Billingmonthly card; annual prepay gets ~10% off
Confidencehigh
Limits & current usage
api4,000 query cost points/min per app (Advanced tier — 2x basic)
currentLive-probed at render
headroomVery wide — currently using <0.1% of throttle
Auth & expiration
MethodAdmin API access token in shopify-bridge worker (custom app 'Cloudflare Bridge')
ExpiresTokens don't auto-expire. Will only break if revoked manually.
Next action: No rotation needed. Audit scopes annually.
Projects using it (14)
fww-chat — Reads products + cart via shopify-bridge
fww-balances-bridge — Reads Shopify Payments balance
fww-booth-dashboard — POS sales by location
fww-order-pro — Creates orders via Admin API
fww-recon-dashboard — Pulls transactions for Xero recon
fuzzywumpets-pos — POS replacement (in progress) writes orders
fww-b2b-portal — B2B catalog/cart via Customer Account API
pattern-manager — Bulk product mutations
fww-theme-fix — Theme file pushes
google-shopping-optimizer — Sets product category metafields
judgeme-fb-import — Pulls products to seed reviews
lapsed-15for15 — Customer segment pulls
fms-accounting — Reads orders to journal into accounting
+ ~10 more — Most apps touch Shopify via shopify-bridge
Watch-outs
- Apps you install (SparkLayer, BCPO, Judge.me Awesome, etc.) each bill SEPARATELY on top of the $399
- Card failures put store in pause mode after grace period
- Annual contract = lower monthly. Worth considering.
Cloudflare
Cloudflare, Inc. · platform
Critical
Free (Workers + Pages + DNS)
Runs ALL your custom mini-apps (Workers), stores their data (KV/R2/D1), hosts fuzzyreporting.com DNS, and proxies VPS apps via Tunnel. Free tier, but it's the backbone.
If it goes away: Every fuzzyreporting.com app dies. Bridges (Shopify/Xero/QBO/Bill Scanner) die. HQ dashboard dies. Chat dies.
Live (last 7d)
129,471 requests · avg 18,496/day · 18.5% of 100k/day free
⚠ High error rate: shopify-bridge (54.2%), fww-tools-mcp (99.1%)
Cost
MonthlyFree
AnnualFree
Billingfree tier
Confidencehigh
Limits & current usage
workers_requests100,000 req/day Free (3M/mo). Live-probed.
workers_cpu10ms CPU/req Free
kv_reads100k reads/day Free, 1k writes/day Free
r2_storage10 GB Free, then $0.015/GB-mo
currentLive-probed at render
Auth & expiration
MethodCLOUDFLARE_API_TOKEN in Doppler (scoped to alex-037 account)
ExpiresAPI tokens don't auto-expire unless you set a TTL.
Next action: Audit token scopes; consider rotating if shared with chat history.
Projects using it (2)
ALL 19 workers — Hosted as Cloudflare Workers
VPS-hosted apps — cloudflared Tunnel from fww-vps-1 to *.fuzzyreporting.com
Watch-outs
- Free tier resets daily, NOT monthly — a single bad day hitting 100k requests will throttle for that day
- Workers AI, Durable Objects, Queues, and CRON beyond Free limits would force a Paid plan ($5/mo + usage)
- If you go Paid: 10M requests included, then $0.30/M
- fuzzyreporting.com is on Free plan zone — no WAF, no advanced rate limiting
Hetzner Cloud
Hetzner Online GmbH · infrastructure
Critical
cpx31 (fww-vps-1)
Linux VPS in Ashburn VA. Runs Docker workloads: Home Assistant, Mosquitto MQTT, Bill Scanner (v3 Node service), Recon dashboard, Vendor Tracker, Filebrowser, Remote Desktop, MCP services. (fww-vpn-oregon was wound down 2026-05-27 — rebuild via ~/projects/vpn-oregon/cloud-init.sh if needed.)
If it goes away: Bill Scanner stops processing bills. Recon dashboard offline. Vendor Tracker stops. Voice Bridge offline. Home Assistant offline. Several smaller VPS-hosted tools die.
Live
$24.99/mo · $299.88/yr
fww-vps-1 (cpx31, running)
Cost
Monthly$24.99
Annual$299.88
Billingmonthly Euro auto-charge
Confidencehigh
Limits & current usage
fww-vps-12 vCPU, 8 GB RAM, 160 GB SSD (cpx31)
currentLive-probed at render
Auth & expiration
MethodHCLOUD_TOKEN in Doppler + SSH key ~/.ssh/hetzner_id_ed25519
ExpiresAPI token doesn't auto-expire. SSH key doesn't expire.
Next action: Rotate HCLOUD_TOKEN — original was exposed in chat 2026-05-13 per memory
Projects using it (8)
fww-bill-scanner (v3) — Node service on port 8788
fww-recon-dashboard — Hosted on VPS, served at recon.fuzzyreporting.com
vendor-tracker — Hosted on VPS, vendor.fuzzyreporting.com
fww-voice-bridge — Tunnels via VPS cloudflared
fww-filebrowser — files.fuzzyreporting.com
fww-remote-desktop — desktop.fuzzyreporting.com
Home Assistant — ha.fuzzyreporting.com via Docker
web-extractor + dog-show crawlers — cron + playwright
Watch-outs
- Hetzner bills in EUR — USD price fluctuates with FX
- Snapshot/backup features cost extra (not currently used; nightly HA backup is local tar)
- If a server gets compromised or filled, only you can fix it — no managed support
Anthropic API
Anthropic PBC · ai
Important
Pay-as-you-go (alex@fuzzywumpets.com console)
Powers every AI feature: the customer chat, Voice Bridge, Bill Scanner extraction, Recon Dashboard's natural-language command bar, dog-show parsing, and the headless Claude Code instances running overnight on the VPS.
If it goes away: AI features stop. Chat shows 'unavailable'. Bills no longer auto-extract. Voice bridge errors. Recon AI command bar stops. (None of this kills your business — fallbacks exist.)
Cost
Monthlyvaries
Annualvaries
Billingcredit auto-recharge
Confidencemedium
NoteSet a hard monthly spend limit in the console — current limit unknown
Limits & current usage
rateTier-based (50 req/min default, scales with usage history)
currentCannot probe spend from regular API key — needs Admin key or console visit
Auth & expiration
MethodANTHROPIC_API_KEY in Doppler (sk-ant-api03-...)
ExpiresKeys don't auto-expire.
Next action: Set spend cap in console. Consider generating per-app keys for cost attribution.
Projects using it (7)
fww-chat — Claude Sonnet 4.6 for customer support
fww-voice-bridge — Claude with MCP access for in-car voice agent
fww-bill-scanner — Claude for invoice extraction
fww-recon-dashboard — Claude for ✨ command bar
vendor-tracker — Claude for vendor-invitation parsing
dog-show-app — Claude for PDF parsing
Claude Code on VPS — Headless overnight runs
Watch-outs
- No spend cap = unlimited charges if a worker loops
- Different from your claude.ai (Claude Code) subscription — separate billing surface
- Sonnet 4.6 ~$3/M input, $15/M output tokens; Opus is 5x more
- Prompt caching can cut costs 90% on chat — check if enabled in fww-chat
Xero
Xero Limited · accounting
Important
(plan unknown — confirm in Xero dashboard)
Your accounting system as of 2026-01-01. Migrated from QuickBooks. Books every transaction, generates P&L, balance sheet, bank recon. Has 1181-1185 inventory sub-accounts + Items catalog (210 items).
If it goes away: Bookkeeping stops. Tax prep needs to pull from somewhere else. fww-xero-bridge errors. Recon dashboard breaks.
Cost
Monthly~$70
Annual~$840
Billingmonthly card
Confidencelow
NoteConfirm exact plan in Xero billing
Limits & current usage
api60 req/min, 5,000 req/day per tenant
currentLive-probed at render (via xero-bridge)
Auth & expiration
MethodOAuth2 refresh token in KV (XERO_TOKENS namespace) + CLIENT_ID/SECRET in Doppler
ExpiresREFRESH TOKEN ROTATES EVERY USE; if it idles >60 days OR fails to rotate, you must re-auth.
Next action: Set a monthly canary that pings xero-bridge to keep refresh token alive
Projects using it (4)
fww-xero-bridge — OAuth proxy for Xero API (KV-stored refresh token)
fww-recon-dashboard — Pulls bank lines + writes coded entries
fww-bill-scanner — Will eventually post bills here (via accounting-automation hub)
qbo-to-xero — Historical migration scripts (mostly done)
Watch-outs
- Refresh token TTL is 60 days idle — bridge MUST be called regularly or re-auth required
- App connection (Xero developer portal) has its own client secret rotation policy
- If you cancel Xero, you lose live access to historical data unless you export first
- Inventory Plus add-on was cancelled 2026-05-23; basic Items catalog handles it
QuickBooks Online
Intuit Inc. · accounting
Legacy
Essentials
Your previous accounting system (real realm 9130354463445866). Was your books before Xero cutover on 2026-01-01.
If it goes away: You lose live access to pre-2026 history. fww-qbo-bridge errors. Historical reclassifier work stops.
Cost
Monthly$30
Annual$360
Billingmonthly card
Confidencemedium
Limits & current usage
api500 req/min sandbox, lower in prod
currentNot actively writing
Auth & expiration
MethodOAuth2 refresh token in KV (qbo-tokens namespace)
ExpiresREFRESH TOKEN TTL: 101 days from last use. Re-auth needed if idle.
Next action: Decide: cancel QBO once Xero migration fully settled, or keep for historical access
Projects using it (2)
fww-qbo-bridge — OAuth proxy, READ_ONLY=true currently
qbo-to-xero — Migration tooling (now mostly done)
Watch-outs
- You're paying for two accounting systems right now ($30 QBO + ~$70 Xero)
- Consider downgrading QBO to read-only/cancel after tax season
- Refresh token expires after 101 days idle — if you stop using it, it WILL break and require re-auth
Plaid
Plaid Inc. · banking
Important
Production (PLAID_ENV=production)
Bank-account API. Links your Chase checking to fww-balances-bridge so the HQ dashboard can show real-time cash balance alongside Shopify Payments.
If it goes away: HQ dashboard 'Cash balance' tile breaks. No real-time Chase number. Manual balance entry fallback still works.
Cost
Monthly~$0-1
Annual~$0-12
Billing$0.30 per balance request after free tier
Confidencelow
Limits & current usage
free_tierFirst 100 API calls/mo free, then per-call pricing
currentBalances bridge hits Plaid every 15 min when cache misses — under 100/mo if cache is healthy
Auth & expiration
MethodPLAID_CLIENT_ID + PLAID_SECRET_PRODUCTION in Doppler; per-bank access_token in BALANCES_KV
Expiresaccess_token is long-lived but bank link can require re-auth (Chase forces ~12 months)
Next action: If balance tile suddenly says 'unable to fetch', re-link Chase in Plaid Link UI
Projects using it (1)
fww-balances-bridge — Calls /accounts/balance/get for Chase
Watch-outs
- Plaid invoices monthly only if you exceed free tier — check dashboard for usage
- Sandbox secret is ALSO stored (PLAID_SECRET_SANDBOX) — keep for testing
- Chase periodically forces re-auth via OAuth handshake — you'll need to re-do Link flow when that happens
Stripe
Stripe, Inc. · payments
Important
Standard (per-transaction)
Payment processor for the new B2B Portal (b2b.fuzzyreporting.com). Wholesale customers pay via Stripe, separate from main Shopify storefront's Shopify Payments.
If it goes away: B2B portal can't charge cards. Wholesale orders fall back to invoice/terms.
Cost
Monthly0 base
Annual0 base
Billing2.9% + $0.30 per transaction
Confidencehigh
Limits & current usage
api100 read req/sec, 100 write req/sec (live mode default)
currentVery low — B2B portal is Phase 1 (catalog only) as of 2026-05-26
Auth & expiration
MethodB2B_PORTAL_STRIPE_PK (publishable) + STRIPE_SK (secret) in Doppler
ExpiresKeys don't auto-expire. Rotate annually as policy.
Next action: Confirm webhook endpoints (if any) registered with Stripe
Projects using it (1)
fww-b2b-portal — Stripe Checkout / Payment Intents
Watch-outs
- If main Shopify storefront also routes to Stripe (via 3rd-party processor), watch for stacked fees
- Stripe holds funds for new accounts — first payout can be delayed 7-14 days
- PCI: never log raw card data; Stripe.js handles tokenization client-side
ShipStation
ShipStation (Auctane) · shipping
Important
(plan unknown — confirm in dashboard)
Shipping label generation and rate shopping. fww-shipping-bridge calls ShipStation v2 API to print labels at scale outside of the Shopify UI.
If it goes away: Bulk label printing via the bridge stops. Shopify's native shipping still works for one-off labels.
Cost
Monthly~$10-30
Annual~$120-360
Billingmonthly card
Confidencelow
Limits & current usage
api20 req/sec v2 default
currentVery low usage — under 150 worker calls/week
Auth & expiration
MethodSS_API_KEY in Doppler (single key, used as API-Key header)
ExpiresAPI key doesn't auto-expire.
Next action: Confirm which carriers are connected — earlier probe returned 0 carriers
Projects using it (2)
fww-shipping-bridge — v2 API for label purchase + void
fww-shipping-station — Older project (may be deprecated)
Watch-outs
- EARLIER PROBE RETURNED 0 CARRIERS — bridge may be wired to an empty account or wrong key. Investigate before relying on it.
- ShipStation merged with stamps.com etc. under Auctane; account portal moved a couple times
- Per-label costs are separate from subscription
Re:amaze
Re:amaze (RewardOps Inc.) · support
Important
(plan unknown — confirm in dashboard)
Customer support helpdesk. Unifies email/chat/SMS support channels. 5 staff seats: Alex, Mason, Maureen, Beth, Chrissy.
If it goes away: Customer support inbox stops. Tickets stop flowing. AI chat handoff (fww-chat → human) breaks.
Cost
Monthly~$29-59/seat
Annual~$1,740-3,540 total
Billingmonthly card
Confidencelow
Note5 seats × tier — confirm exact plan
Limits & current usage
api60 req/min standard
currentLight — handoff only
Auth & expiration
MethodREAMAZE_AUTH_EMAIL + REAMAZE_API_TOKEN in Doppler (HTTP Basic)
ExpiresAPI token doesn't auto-expire.
Next action: Check plan tier — 5 seats × Re:amaze Plus would be ~$295/mo
Projects using it (1)
fww-chat — Handoff tool routes complex chats to Re:amaze
Watch-outs
- AI agent overage charges if 'manage_ai_agent_usage_overage' permission is being exercised
- If you removed a staff member but didn't downgrade seat count, you're overpaying
- Per-seat pricing — adding employees compounds quickly
Google Workspace
Google LLC · productivity
Critical
(plan unknown — Business Starter or Standard likely)
alex@fuzzywumpets.com email + Drive + the OAuth identity provider for the fuzzywumpets.com tailnet. Powers Gmail-scanning for Bill Scanner and B2B admin auth.
If it goes away: Email dies. SSO breaks for any app that uses Google Sign-In. Bill Scanner can't read invoices. Tailnet stops accepting new logins.
Cost
Monthly~$6-18/seat
Annual~$72-216/seat
Billingmonthly card
Confidencelow
Limits & current usage
gmail_api1B quota units/day per project, 250 units/user/sec
currentTrivial — bill scanner makes <100 calls/day
Auth & expiration
MethodOAuth2 refresh token in BILL_TOKENS KV (issued via bill-scanner) + GOOGLE_CLIENT_SECRET in Doppler for B2B admin
ExpiresGoogle OAuth refresh tokens don't expire unless: user changes password, revokes access, 6 months unused, or org policy
Next action: Document which Google Cloud projects own which OAuth client IDs
Projects using it (3)
fww-bill-scanner — Gmail readonly OAuth via /issue-access-token
fww-b2b-admin — Google OAuth for staff login (B2B_ADMIN_GOOGLE_CLIENT_ID)
vendor-tracker — Gmail OAuth (same access token as bill-scanner)
Watch-outs
- If you change your Google password, ALL OAuth refresh tokens are invalidated — bill scanner + vendor tracker need re-auth
- Tailnet uses Google SSO — losing Workspace = losing Tailscale (though nothing depends on Tailscale)
- Google Cloud project hosting the OAuth clients also stays alive — don't delete it
GitHub
GitHub, Inc. · code
Important
Free (personal account fuzzyalex84) — 46 private repos
Source-of-truth for ALL your code. 46 private repos under github.com/fuzzyalex84. Local + VPS both push here.
If it goes away: Code history gone (unless you have local clones). New deploys can't pull. fww-vps-1 git sync fails.
Cost
MonthlyFree
AnnualFree
BillingFree Plan
Confidencehigh
Limits & current usage
private_reposunlimited on Free plan (personal accounts since 2020)
storageno formal limit but >1GB/repo is rude; LFS billable separately
actions2000 min/mo CI included (not currently used)
Auth & expiration
MethodPersonal Access Token (PAT) in ~/.secrets/github.env on both Windows + VPS
ExpiresPAT expires 2026-06-12 per memory
Next action: ROTATE PAT BEFORE 2026-06-12 — currently 16 days out
Projects using it (1)
ALL projects — Private repos under fuzzyalex84/*
Watch-outs
- PAT expires 2026-06-12 — set a calendar reminder NOW
- If you ever go Team/Enterprise, it's $4/seat/mo
- Repos are tied to your personal account — if you migrate to an org, all bridges' git remotes need updating
Doppler
Doppler, Inc. · secrets
Critical
Free or Developer (workplace 'Fuzzywumpets')
Secrets vault. EVERY API key, bearer, OAuth secret used by your apps lives here. CLI authenticated globally on both Windows + VPS.
If it goes away: Every bridge breaks. Bill scanner stops. Recon stops. Chat stops. Voice bridge stops. You can rebuild from local backups in ~/.secrets/ but they're stale.
Cost
Monthly0
Annual0
BillingFree tier (1 user, unlimited projects)
Confidencemedium
Limits & current usage
free1 user, 1 workplace, unlimited projects/secrets
Auth & expiration
MethodService token persisted at ~/.secrets/doppler.env on both machines
ExpiresService tokens don't expire unless you set a TTL
Next action: If service token leaks, rotate immediately in Doppler dashboard
Projects using it (2)
ALL workers — Secrets injected at deploy time via `doppler run --`
VPS services — Doppler CLI pre-authed system-wide
Watch-outs
- If you add a teammate to Doppler, the Free tier maxes out and you'd jump to $11/seat/mo (Team plan)
- ALL eggs in one basket — losing Doppler access locks you out of everything
- ~/.secrets/ files are backups but EXPLICITLY MARKED STALE — never read from them per global rule
MacInCloud
MacInCloud (Power Hosting LLC) · infrastructure
Optional
(plan unknown — confirm in dashboard)
Rented macOS instance (NY451) used for iOS/macOS-specific dev tasks (Xcode builds, Siri Shortcuts testing, Apple-side work).
If it goes away: Can't build iOS apps or test iOS shortcuts. Most current projects don't need this.
Cost
Monthly~$30-50
Annual~$360-600
Billingmonthly
Confidencelow
Limits & current usage
single_seatOne concurrent user
Auth & expiration
MethodMACINCLOUD_USERNAME/PASSWORD in Doppler
ExpiresPassword doesn't auto-expire
Next action: If you have no active iOS work, consider pausing/canceling
Projects using it (1)
(none currently building iOS) — Reserved for future iOS work
Watch-outs
- Likely idle subscription — easy to forget
- Worth canceling if you're not actively building iOS/Mac apps
Twilio
Twilio Inc. · telephony
Pending
(Account not yet issued — signup in progress)
SMS/voice API. Signup started 2026-05-26 but Account SID not yet issued (Twilio degraded service during signup).
If it goes away: Nothing currently. Pending future SMS feature.
Cost
Monthly$0 pay-as-you-go
Annualvaries
Billingcredit recharge
Confidencelow
Limits & current usage
pricing$0.0079/SMS US, $1.15/mo per phone number
Auth & expiration
MethodTWILIO_SIGNUP_EMAIL/PASSWORD in Doppler; MFA recovery code also stored
ExpiresMFA recovery code is one-time use
Next action: Resume runbook at ~/projects/twilio-signup/STATUS.md if/when needed
Projects using it (1)
(future) — Not yet integrated
Watch-outs
- Account creation is incomplete — verify whether free trial credits expired before reactivating
- If you don't have a clear use case, hold off and avoid the phone-number monthly fee
Judge.me
Judge.me · reviews
Important
Free or Awesome (unknown — confirm in app)
Product review platform embedded in the Shopify storefront. Widgets in fw-product.liquid display review counts and stars.
If it goes away: Product pages lose review stars/widgets. JSON-LD review schema disappears (SEO hit). Existing reviews aren't deleted but no new ones collected.
Cost
Monthly$0 Free OR $15 Awesome
Annual$0-180
BillingShopify app billing
Confidencelow
Limits & current usage
freeUnlimited orders/reviews, basic widgets
awesomeQ&A, custom forms, video reviews
Auth & expiration
MethodShopify app install — no API key stored locally
ExpiresN/A — Shopify-managed
Next action: Confirm plan tier in Shopify Admin → Apps → Judge.me
Projects using it (2)
Shopify theme — Liquid widgets in fw-product.liquid
judgeme-fb-import — Bulk review import tooling
Watch-outs
- If on Awesome, billed via Shopify (shows up in main Shopify invoice as app charge)
- Switching plans / uninstalling can re-trigger widget JS — test storefront after any change
SparkLayer
SparkLayer LTD · b2b
Being replaced
(plan unknown)
B2B wholesale layer on top of Shopify. Used by wholesale customers to see trade pricing. BEING REPLACED by fww-b2b-portal.
If it goes away: Wholesale customers can't see trade pricing on main storefront. NEW portal at b2b.fuzzyreporting.com is the replacement.
Cost
Monthly~$99-499
Annual~$1,188-5,988
BillingShopify app billing
Confidencelow
Limits & current usage
variesBy plan tier
Auth & expiration
MethodShopify app — no local key
ExpiresN/A
Next action: Once fww-b2b-portal hits Phase 2 (cart + orders), uninstall SparkLayer to stop billing
Projects using it (2)
Shopify theme — <spark-pdp> markers in fw-product.liquid
fww-b2b-portal — Replacement (Phase 1 LIVE 2026-05-26)
Watch-outs
- Currently paying for both SparkLayer AND building the replacement
- Don't uninstall until fww-b2b-portal has feature parity
- Wholesale customers may have bookmarks pointing to SparkLayer-branded URLs
Bold Custom Product Options (BCPO)
Bold Commerce · storefront
Important
(unknown — confirm in Shopify app)
Adds custom option dropdowns to product pages (width, size, pattern). Hidden everywhere except deerskin-show-leads PDP per memory.
If it goes away: Deerskin-show-leads product loses its custom-option dropdowns. All other PDPs unaffected (BCPO is hidden on those).
Cost
Monthly~$20-50
Annual~$240-600
BillingShopify app billing
Confidencelow
Limits & current usage
variesBy plan
Auth & expiration
MethodShopify app — no local key
ExpiresN/A
Next action: Audit if BCPO is overkill for one PDP — could be replaced with native Shopify variants
Projects using it (1)
Shopify theme — Liquid integration; hidden by CSS except on one product
Watch-outs
- You're paying for an app used on ONE product — consider native variants or line-item properties instead
- Memory notes BCPO duplicated variant pickers on most PDPs; hide-everywhere-but-one is fragile
Home Assistant
Open Home Foundation (free OSS) · iot
Optional
Self-hosted (Docker on fww-vps-1)
Open-source smart-home controller. Onboarded, has MQTT broker. Intended as MCP tool for Voice Bridge.
If it goes away: Home automation stops (if you have any wired up). Voice bridge loses HA tool.
Cost
MonthlyFree
AnnualFree
BillingFree OSS — VPS resources only
Confidencehigh
Limits & current usage
self_hostedBounded by fww-vps-1 RAM (8GB cpx31)
Auth & expiration
MethodDocker container on VPS; no external service auth
ExpiresN/A
Next action: HACS components: keep updated via Watchtower
Projects using it (1)
fww-voice-bridge — MCP tool wired to ha.fuzzyreporting.com
Watch-outs
- Nightly tar backup runs at 3am, 14-day retention. Safe.
- If VPS RAM gets tight, HA can OOM
Cloudflare Tunnel
Cloudflare, Inc. · infrastructure
Critical
Free (part of CF account)
Encrypted reverse tunnel from fww-vps-1 to Cloudflare edge. Lets *.fuzzyreporting.com point at services on the VPS without opening any inbound ports.
If it goes away: Every VPS-hosted *.fuzzyreporting.com subdomain breaks. Voice bridge, recon, vendor tracker, filebrowser, HA UI, remote desktop all go offline.
Cost
MonthlyFree
AnnualFree
BillingFree with CF account
Confidencehigh
Limits & current usage
free_tierUnlimited bandwidth for HTTP/S tunnels
Auth & expiration
MethodTunnel credentials JSON on VPS at /etc/cloudflared/
ExpiresDoesn't expire
Next action: Per memory: orphan cloudflared processes can occur on config changes; restart cleanly with systemctl
Projects using it (1)
ALL fuzzyreporting.com VPS apps — Single tunnel 'fww-voice-agent' routes everything
Watch-outs
- Adding a subdomain requires editing ingress + `route dns` + RESTART cloudflared (SIGHUP won't reload)
- If credentials JSON is deleted/corrupted, every VPS app goes down until tunnel re-authed
Apple ID
Apple Inc. · platform
Optional
Free
alex@fuzzywumpets.com Apple ID. Used for Siri Shortcuts (Voice Bridge), iPad/iPhone POS testing.
If it goes away: Siri Shortcut to voice bridge breaks. iPad POS testing harder.
Cost
MonthlyFree
AnnualFree
BillingFree
Confidencehigh
Limits & current usage
icloud_storage5GB free, $0.99/mo for 50GB
Auth & expiration
MethodAPPLE_ID_EMAIL + APPLE_ID_PASSWORD in Doppler
ExpiresN/A
Next action: If 2FA recovery key isn't stored somewhere safe, store it (Apple ID lockout is brutal)
Projects using it (1)
fww-voice-bridge — Siri Shortcut configured for voice agent
Watch-outs
- Apple ID lockout takes WEEKS to recover — guard the recovery key
- App-specific passwords (if used) need rotation when 2FA changes