Security check for Ask on your own domain

Add your Cloudflare Turnstile keys so that Ask on a docs site with a custom domain checks that a visitor is a person.

Ask is the question box of a docs site. Before the first question, the site checks that the
visitor is a person. The check is Cloudflare Turnstile. Most visitors see nothing.

Site address	Security check
The built-in address, such as `acme-docs.revdoku.site`	Revdoku’s own check. It needs no setup.
Your own domain, such as `docs.example.com`	Your own Turnstile widget. Add its keys as this page says.

A Turnstile widget runs only on the hostnames that its owner lists. Revdoku’s widget lists
Revdoku’s domains, so it cannot run on your domain. Without your keys, Ask on your domain
works without the check, and only the limits on the number of questions apply.

Before you start

You need these two things:

A docs site whose custom domain is live. Site → Domain shows Active.
A Cloudflare account. Your DNS can stay at another provider.

Open the Cloudflare dashboard and select Turnstile.
Select Add widget.
Enter a name, for example Docs Ask.
Add the hostname of your docs site, for example docs.example.com.
Select the widget mode Managed.
Create the widget.
Copy the Site key and the Secret key.

Add the keys to your site

Open your bucket in the dashboard.
Select Site, then Domain.
Open Security check for Ask.
Paste the site key and the secret key.
Select Save. The row shows Set.

The check applies at once. You do not publish the site again.
Revdoku stores the secret key encrypted and shows only its last 4 characters.

Make sure that it works

Open your docs site on your domain in a private browser window.
Select Ask and ask a question.
Make sure that an answer shows.

The Turnstile page of the Cloudflare dashboard counts each check of your widget.

Change or remove the keys

To do this	Do this
Use another widget	Paste the new site key and secret key, then select Save.
Stop the check	Select Remove. Ask on your domain then works without the check.

Troubleshooting

Problem	Cause	Fix
Ask shows “Complete the security check.” and no answer	The widget does not list the hostname of your site	Add the hostname to the widget in Cloudflare.
Save shows “Enter the site key and the secret key of your Turnstile widget.”	A key is incomplete	Copy both keys again from the widget’s page.
The row is not on the Domain page	The custom domain is not live yet	Finish the domain setup first.