tier 1 · public
tired.events
EC2 nginx static HTML · no secrets · open to internet · HSTS + 4 security headers
tired.events · tiredevents.com · tiredapi.co
tier 2 · shared
api.tired.events
Cloudflare Worker · Hono · Cognito + KV rate limit + bearer token · /health/* CORS-permissive · 60/min/IP
api.tired.events
tier 3 · private
internal.tiredapi.co
VPC-only allowlist 172.31.0.0/16 + localhost · auto-injected HMAC token · admin-only routes
internal.tiredapi.co