1# Stream Configuration
2 
3Setup, environment variables, and wrangler configuration.
4 
5## Installation
6 
7```bash
8# Official Cloudflare SDK (Node.js, Workers, Pages)
9npm install cloudflare
10 
11# React component library
12npm install @cloudflare/stream-react
13 
14# TUS resumable uploads (large files)
15npm install tus-js-client
16```
17 
18## Environment Variables
19 
20```bash
21# Required
22CF_ACCOUNT_ID=your-account-id
23CF_API_TOKEN=your-api-token
24 
25# For signed URLs (high volume)
26STREAM_KEY_ID=your-key-id
27STREAM_JWK=base64-encoded-jwk
28 
29# For webhooks
30WEBHOOK_SECRET=your-webhook-secret
31 
32# Customer subdomain (from dashboard)
33STREAM_CUSTOMER_CODE=your-customer-code
34```
35 
36## Wrangler Configuration
37 
38```jsonc
39{
40  "name": "stream-worker",
41  "main": "src/index.ts",
42  "compatibility_date": "2025-01-01", // Use current date for new projects
43  "vars": {
44    "CF_ACCOUNT_ID": "your-account-id"
45  }
46  // Store secrets: wrangler secret put CF_API_TOKEN
47  // wrangler secret put STREAM_KEY_ID
48  // wrangler secret put STREAM_JWK
49  // wrangler secret put WEBHOOK_SECRET
50}
51```
52 
53## Signing Keys (High Volume)
54 
55Create once for self-signing tokens (thousands of daily users).
56 
57**Create key**
58```bash
59curl -X POST \
60  "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/keys" \
61  -H "Authorization: Bearer <API_TOKEN>"
62 
63# Save `id` and `jwk` (base64) from response
64```
65 
66**Store in secrets**
67```bash
68wrangler secret put STREAM_KEY_ID
69wrangler secret put STREAM_JWK
70```
71 
72## Webhooks
73 
74**Setup webhook URL**
75```bash
76curl -X PUT \
77  "https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/webhook" \
78  -H "Authorization: Bearer <API_TOKEN>" \
79  -H "Content-Type: application/json" \
80  -d '{"notificationUrl": "https://your-worker.workers.dev/webhook"}'
81 
82# Save the returned `secret` for signature verification
83```
84 
85**Store secret**
86```bash
87wrangler secret put WEBHOOK_SECRET
88```
89 
90## Direct Upload / Live / Watermark Config
91 
92```typescript
93// Direct upload
94const uploadConfig = {
95  maxDurationSeconds: 3600,
96  expiry: new Date(Date.now() + 3600000).toISOString(),
97  requireSignedURLs: true,
98  allowedOrigins: ['https://yourdomain.com'],
99  meta: { creator: 'user-123' }
100};
101 
102// Live input
103const liveConfig = {
104  recording: { mode: 'automatic', timeoutSeconds: 30 },
105  deleteRecordingAfterDays: 30
106};
107 
108// Watermark
109const watermark = {
110  name: 'Logo', opacity: 0.7, padding: 20,
111  position: 'lowerRight', scale: 0.15
112};
113```
114 
115## Access Rules & Player Config
116 
117```typescript
118// Access rules: allow US/CA, block CN/RU, or IP allowlist
119const geoRestrict = [
120  { type: 'ip.geoip.country', action: 'allow', country: ['US', 'CA'] },
121  { type: 'any', action: 'block' }
122];
123 
124// Player params for iframe
125const playerParams = new URLSearchParams({
126  autoplay: 'true', muted: 'true', preload: 'auto', defaultTextTrack: 'en'
127});
128```
129 
130## In This Reference
131 
132- [README.md](./README.md) - Overview and quick start
133- [api.md](./api.md) - On-demand video APIs
134- [api-live.md](./api-live.md) - Live streaming APIs
135- [patterns.md](./patterns.md) - Full-stack flows, best practices
136- [gotchas.md](./gotchas.md) - Error codes, troubleshooting
137 
138## See Also
139 
140- [wrangler](../wrangler/) - Wrangler CLI and configuration
141- [workers](../workers/) - Deploy Stream APIs in Workers
142