INSTALL
Deploy to Cloudflare, in one click
Blue Folder Mail runs on your own Cloudflare account. The button below hands the repo to Cloudflare, which provisions your database, encrypted storage and AI, then deploys the app. A short checklist wires up email and your domain afterward.
Click to deploy
Cloudflare clones the repo into your own GitHub account and provisions fresh resources in your account — nothing is shared with anyone else.
What the one click does automatically
When you connect your Cloudflare and Git accounts, Cloudflare does all of this for you:
- Clones the repo to your GitHub/GitLabYou keep your own copy to pull updates into and redeploy.
- Creates your D1 databaseA fresh, empty metadata index in your account. The app creates its tables on first load — no SQL to run.
- Creates your R2 bucketYour own encrypted mail store. Sealed blobs only; the server can never read them.
- Binds Workers AIFor in-app translation, on your account — no third-party service.
- Deploys the WorkerLive on a *.workers.dev URL you can open immediately to start setup.
After you deploy — your checklist
The button can’t touch secrets, email routing, custom domains or access control. Finish these by hand, roughly in order:
- Create your encrypted mailbox — open the workers.dev URL, generate your key, and save your backup password (it can’t be recovered).
- Add your Resend API key — verify your sending domains at resend.com, then store the key as a Worker secret RESEND_API_KEY so replies are DKIM-signed.
- Turn on Email Routing — per domain: enable it (adds MX records), then add a catch-all rule delivering every address to the Worker.
- Add your own domain — attach a custom domain to the Worker in the dashboard; TLS is automatic.
- Lock the front door — put the app behind Cloudflare Access (passkey / your email only), then set ACCESS_ENFORCE="1". Do this before adding real mail.
Or install anywhere
Cloudflare is the primary, lowest-effort path. The same code also self-hosts with Docker on any VPS, server or home lab — inbound arrives by webhook instead of Email Routing, and the zero-access encryption is identical.
Not sure which path fits? The setup quiz gives an honest recommendation.