A personal ActivityPub server using GitHub as a data store, powered by Cloudflare Workers + D1.

• Fully interoperable with existing ActivityPub servers like Mastodon
• All posts, images, and settings stored in a GitHub repository (source of truth)
• Private keys securely managed via GitHub Actions Secrets + Cloudflare Workers Secrets
• Nearly free to operate (Cloudflare free tier + GitHub free tier)

• Runtime: Cloudflare Workers
• Database: Cloudflare D1 (SQLite) - for caching and high-frequency data
• Data Storage: GitHub Repository (ap.ngs.io-data)
• Framework: Hono
• CI/CD: GitHub Actions

npm install

Copy .env.example to .env and edit:

cp .env.example .env

ADMIN_TOKEN=your-secret-admin-token
GITHUB_TOKEN=ghp_xxxx

# Local
npm run db:init

# Remote (production)
npm run db:init:remote

npm run dev

npm run deploy

1. Create a Markdown file in accounts/{handle}/posts/ in the data repository
2. Push to trigger GitHub Actions which automatically syncs and publishes
3. Post is delivered to followers

Or via CLI:

npm run new-post -- --account ngs --content "Hello, Fediverse!"

Sync from GitHub to D1:

npm run sync

Deliver unpublished posts to followers:

npm run publish

# Follow
npm run follow -- --account ngs --target [email protected]

# Unfollow
npm run unfollow -- --account ngs --target [email protected]

All admin APIs require Authorization: Bearer {ADMIN_TOKEN} header.

See ap.ngs.io-data for the data repository structure:

accounts/
└── {handle}/
    ├── profile.json      # Profile settings
    ├── public_key.pem    # Public key
    ├── posts/*.md        # Posts
    ├── media/*           # Media files
    └── data/
        ├── followers.json
        ├── following.json
        └── received/     # Received activities

{
  "name": "Display Name",
  "summary": "Bio here",
  "icon": "avatar.jpg",
  "image": "header.jpg",
  "fields": [
    { "name": "Website", "value": "https://example.com" }
  ],
  "manuallyApprovesFollowers": false,
  "discoverable": true
}

---
published: "2025-01-22T10:00:00Z"
visibility: "public"
---

Post content here #hashtag

![image](image.jpg)

GitHub Actions Secrets
├── CLOUDFLARE_API_TOKEN
├── CLOUDFLARE_ACCOUNT_ID
├── ADMIN_TOKEN
└── ACCOUNT_{HANDLE}_PRIVATE_KEY

↓ Synced during deployment

Cloudflare Workers Secrets
├── GITHUB_TOKEN
├── ADMIN_TOKEN
└── PRIVATE_KEY_{handle}

• Never commit private keys to the GitHub repository
• Be aware of GitHub API rate limits (5,000 req/hour)
• Uses rsa-sha256 for Mastodon compatibility