Cloudflare, R2, Mail Server Migration

I have two web applications that must follow the same Cloudflare + R2 pattern already running on a third project, so you can reference an existing working setup rather than starting from scratch.

For Cloudflare, clone the configuration, update the DNS records, enforce Full (strict) SSL/TLS, and replicate the essential firewall rules we use to keep the apps locked down. Both sites need to be fully functional behind Cloudflare once you are done.

Each application also requires its own R2 bucket. One will store user-uploaded content; the other will host a set of static HTML files. Please create the buckets, set the correct CORS and access policies, and update the applications so they read and write to R2 seamlessly.

Finally, I need to move off Resend. Spin up a new mail server, migrate the existing Resend domain settings, templates, and any other configuration, and verify SPF, DKIM, and DMARC all pass. Mail must send and land in a Gmail or IMAP inbox without hitting spam.

Deliverables / acceptance:
• Cloudflare active on both domains with strict SSL and replicated firewall rules.
• R2 buckets created, permissions tuned, apps reading/writing as expected.
• Outbound mail flowing through the new server with Resend fully retired.
• Brief, clear documentation of every change for future maintenance.