Self-hosting

OpenSession runs as a single Cloudflare Worker with D1 (SQLite database), R2 (file storage), and the send_email binding for transactional emails. The entire stack fits within Cloudflare's free tier for most conference workloads.

Prerequisites

A Cloudflare account (free tier works)
Node.js 18+ and pnpm
Google OAuth credentials (optional, for Google login)
A domain pointed at Cloudflare (for email sending)

Architecture

  ┌──────────────────────── Cloudflare Worker ────────────────────────┐
  │                                                                   │
  │  Spiceflow app (React Server Components)                         │
  │  ├── Admin dashboard    /org/:orgId/e/:eventId/*                  │
  │  ├── Public CFP         /submit/:eventSlug/:formSlug              │
  │  ├── Speaker portal     /portal/:eventSlug/*                      │
  │  ├── Embeds             /embed/:eventSlug/*                       │
  │  ├── API                /api/auth/* (BetterAuth)                  │
  │  └── Cron               close forms, reminders, outbox drain      │
  │                                                                   │
  └────────┬──────────────┬──────────────┬────────────────────────────┘
           │              │              │
           v              v              v
      D1 database    R2 bucket      send_email binding
      (SQLite)       (files)        (transactional mail)

Setup steps

Clone the repository

123git clone https://github.com/remorses/opensession
cd opensession
pnpm install

Create Cloudflare resources

Create a D1 database and R2 bucket in your Cloudflare dashboard or via Wrangler:

123cd website
npx wrangler d1 create opensession-db
npx wrangler r2 bucket create opensession-files

Update wrangler.jsonc with your database ID.

Configure Google OAuth (optional)

Create OAuth credentials in the Google Cloud Console:

Create a new OAuth 2.0 Client ID
Set the authorized redirect URI to https://your-domain.com/api/auth/callback/google
Note the Client ID and Client Secret

Set secrets

Store your auth secrets using Wrangler or your preferred secrets manager. Add the Google credentials only when you want to offer Google login:

123npx wrangler secret put BETTER_AUTH_SECRET
npx wrangler secret put GOOGLE_CLIENT_ID
npx wrangler secret put GOOGLE_CLIENT_SECRET

Set BETTER_AUTH_URL to your production domain (e.g. https://opensession.dev).

Run migrations

1pnpm db:migrate:remote

Deploy

1pnpm deploy

Local development

For local development, the Vite dev server runs with Miniflare (local Cloudflare runtime) on port 8788:

123cd website
pnpm db:migrate:local
pnpm dev

Secrets for local development should be injected through your secrets manager (the project uses sigillo). Never commit .env or .dev.vars files.

Environment

Resource	Production	Preview
Worker	`opensession-website`	`opensession-website-preview`
Domain	`opensession.dev`	`preview.opensession.dev`
D1	`opensession-db`	`opensession-preview-db`
R2	`opensession-files`	Shared

The preview environment uses a separate D1 database so test data does not affect production.

Cost

Cloudflare Workers free tier includes:

Resource	Free tier limit
Worker requests	100,000 / day
D1 reads	5 million / day
D1 writes	100,000 / day
D1 storage	5 GB
R2 storage	10 GB
R2 operations	10 million reads, 1 million writes / month
Email sending	100 / day (on Workers Paid, higher limits)

A conference with 500 submissions, 100 accepted speakers, and 50,000 public agenda views per month fits comfortably within these limits.

Ask AI about this page