I originally wrote this post for a friend; I’m just cleaning it up a bit and publishing it.

I’ll assume you’ve never touched domain email, Cloudflare Workers, SMS-code platforms, registration bots, or AI API relays before. Wherever possible I’ll explain things in terms of “why this step exists” and “how to confirm you did it right”. When you get stuck, you can just paste the error into an AI and ask — in my testing, Codex handles this kind of deployment doc and config troubleshooting reasonably well. But sanitize API keys, passwords, cookies, and tokens before sending them to an AI. Don’t ask me how I know.