Marketplace plugin that syncs your encrypted Voltius vault through a bring-your-own Cloudflare Worker + R2 store.
- Encryption stays on-device (
api.crypto.deriveKey+sync.exportState/importStates) - The Worker only stores opaque ciphertext + device metadata
- Transport auth is a Bearer
SYNC_TOKEN(never reuse it as the encryption passphrase) - In-app Deploy Worker uses the Cloudflare HTTP API (Account ID + API token) so you never leave Voltius Settings
Tracking: VoltiusApp/voltius#267 (marketplace-only; core PR #268 closed).
Gist Sync is still the simplest path if you already have GitHub. Choose Cloudflare Sync when you want:
| Cloudflare Sync | Gist Sync | |
|---|---|---|
| Storage you control | Your R2 bucket | GitHub Gist |
| Account required | Cloudflare | GitHub + PAT |
| Deploy | In-app (API token) or Deploy-to-Cloudflare | Paste gist token |
| Backend shape | Dedicated Worker API + ETag concurrency | Gist file API |
| Encryption | Client-side E2EE (passphrase) | Client-side E2EE (passphrase) |
Both keep encryption on-device. This plugin is for self-hosters who prefer Cloudflare infra over GitHub as the sync transport.
npm install
npm run build # → dist/index.js
npm run check # host specifier gateCopy manifest.json and dist/index.js into your Voltius plugins folder as
plugins/plugin-cloudflare-sync/ (folder name must match manifest.json id), then restart Voltius.
Settings → Cloudflare Sync → Deploy Worker:
- Cloudflare Account ID + API token (Workers Scripts Edit, Workers R2 Storage Edit, Account Settings Read)
- Generate sync token (fills the Sync token vault field)
- Deploy Worker — creates R2 bucket if needed, uploads the published
worker.mjsartifact, setsSYNC_TOKEN, fills Worker URL - Enter a separate encryption passphrase → Create vault / Link existing
The Cloudflare API token is kept in React state only (not persisted). Account ID / Worker name / bucket name are stored in plugin storage.
Secondary: Copy Deploy-to-Cloudflare URL copies the official dashboard button URL via navigator.clipboard (with toast fallback) for users who prefer that flow. Plain <a href> links are a no-op in the Tauri webview.
See voltius-cloudflare-sync-worker.
vault:read/write, storage, http, crypto:derive, ui, sync:read/write, notifications, settings-page.
MIT