1# Configuration & Deployment
2 
3## Dashboard Setup
4 
51. Navigate to https://dash.cloudflare.com/?to=/:account/calls
62. Click "Create Application" (or use existing app)
73. Copy `CALLS_APP_ID` from dashboard
84. Generate and copy `CALLS_APP_SECRET` (treat as sensitive credential)
95. Use credentials in Wrangler config or environment variables below
10 
11## Dependencies
12 
13**Backend (Workers):** Built-in fetch API, no additional packages required
14 
15**Client (PartyTracks):**
16```bash
17npm install partytracks @cloudflare/calls
18```
19 
20**Client (React + PartyTracks):**
21```bash
22npm install partytracks @cloudflare/calls observable-hooks
23# Observable hooks: useObservableAsValue, useValueAsObservable
24```
25 
26**Client (Raw API):** Native browser WebRTC API only
27 
28## Wrangler Setup
29 
30```jsonc
31{
32  "name": "my-calls-app",
33  "main": "src/index.ts",
34  "compatibility_date": "2025-01-01", // Use current date for new projects
35  "vars": {
36    "CALLS_APP_ID": "your-app-id",
37    "MAX_WEBCAM_BITRATE": "1200000",
38    "MAX_WEBCAM_FRAMERATE": "24",
39    "MAX_WEBCAM_QUALITY_LEVEL": "1080"
40  },
41  // Set secret: wrangler secret put CALLS_APP_SECRET
42  "durable_objects": {
43    "bindings": [
44      {
45        "name": "ROOM",
46        "class_name": "Room"
47      }
48    ]
49  }
50}
51```
52 
53## Deploy
54 
55```bash
56wrangler login
57wrangler secret put CALLS_APP_SECRET
58wrangler deploy
59```
60 
61## Environment Variables
62 
63**Required:**
64- `CALLS_APP_ID`: From dashboard
65- `CALLS_APP_SECRET`: From dashboard (secret)
66 
67**Optional:**
68- `MAX_WEBCAM_BITRATE` (default: 1200000)
69- `MAX_WEBCAM_FRAMERATE` (default: 24)
70- `MAX_WEBCAM_QUALITY_LEVEL` (default: 1080)
71- `TURN_SERVICE_ID`: TURN service
72- `TURN_SERVICE_TOKEN`: TURN auth (secret)
73 
74## TURN Configuration
75 
76```javascript
77const pc = new RTCPeerConnection({
78  iceServers: [
79    { urls: 'stun:stun.cloudflare.com:3478' },
80    {
81      urls: [
82        'turn:turn.cloudflare.com:3478?transport=udp',
83        'turn:turn.cloudflare.com:3478?transport=tcp',
84        'turns:turn.cloudflare.com:5349?transport=tcp'
85      ],
86      username: turnUsername,
87      credential: turnCredential
88    }
89  ],
90  bundlePolicy: 'max-bundle', // Recommended: reduces overhead
91  iceTransportPolicy: 'all'    // Use 'relay' to force TURN (testing only)
92});
93```
94 
95**Ports:** 3478 (UDP/TCP), 53 (UDP), 80 (TCP), 443 (TLS), 5349 (TLS)
96 
97**When to use TURN:** Required for restrictive corporate firewalls/networks that block UDP. ~5-10% of connections fallback to TURN. STUN works for most users.
98 
99**ICE candidate filtering:** Cloudflare handles candidate filtering automatically. No need to manually filter candidates.
100 
101## Durable Object Boilerplate
102 
103Minimal presence system:
104 
105```typescript
106export class Room {
107  private sessions = new Map<string, {userId: string, tracks: string[]}>();
108 
109  async fetch(req: Request) {
110    const {pathname} = new URL(req.url);
111    const body = await req.json();
112    
113    if (pathname === '/join') {
114      this.sessions.set(body.sessionId, {userId: body.userId, tracks: []});
115      return Response.json({participants: this.sessions.size});
116    }
117    
118    if (pathname === '/publish') {
119      this.sessions.get(body.sessionId)?.tracks.push(...body.tracks);
120      // Broadcast to others via WebSocket (not shown)
121      return new Response('OK');
122    }
123    
124    return new Response('Not found', {status: 404});
125  }
126}
127```
128 
129## Environment Validation
130 
131Check credentials before first API call:
132 
133```typescript
134if (!env.CALLS_APP_ID || !env.CALLS_APP_SECRET) {
135  throw new Error('CALLS_APP_ID and CALLS_APP_SECRET required');
136}
137```
138