Edge-First Architecture with Cloudflare

// Cloudflare Worker: Casino API Gateway
export default {
  async fetch(request: Request, env: Env): Promise<Response> {
    const url = new URL(request.url);

    // Rate limiting per player
    const playerId = request.headers.get('X-Player-ID');
    const rateKey = `rate:${playerId}:${Math.floor(Date.now() / 60000)}`;
    const count = await env.KV.get(rateKey) || '0';

    if (parseInt(count) > 100) {
      return new Response('Rate limited', { status: 429 });
    }
    await env.KV.put(rateKey, String(parseInt(count) + 1), { expirationTtl: 120 });

    // Route to game services
    if (url.pathname.startsWith('/api/gal/')) {
      return handleGAL(request, env);
    }
    if (url.pathname.startsWith('/api/wallet/')) {
      return handleWallet(request, env);
    }

    return env.ASSETS.fetch(request);
  }
};

// D1 Database: Player wallet with event sourcing
async function handleWallet(request: Request, env: Env): Promise<Response> {
  const { player_id, amount, type } = await request.json();

  // Event-sourced transaction
  const result = await env.DB.prepare(`
    INSERT INTO wallet_events (player_id, event_type, amount, created_at)
    VALUES (?, ?, ?, datetime('now'))
    RETURNING (
      SELECT COALESCE(SUM(
        CASE WHEN event_type = 'DEPOSIT' THEN amount
             WHEN event_type = 'WIN' THEN amount
             ELSE -amount END
      ), 0) FROM wallet_events WHERE player_id = ?
    ) as new_balance
  `).bind(player_id, type, amount, player_id).first();

  return Response.json({ balance: result.new_balance });
}

# Terraform: Cloudflare WAF for gambling compliance
resource "cloudflare_ruleset" "casino_waf" {
  zone_id = var.zone_id
  name    = "Casino WAF Rules"
  kind    = "zone"
  phase   = "http_rq_firewall_managed"

  rules {
    action = "block"
    expression = "(http.request.uri.path contains \"/api/\" and not ip.src in {10.0.0.0/8})"
    description = "Block direct API access from non-whitelisted IPs"
  }

  rules {
    action     = "block"
    expression = "(cf.bot_score lt 30 and http.request.uri.path contains \"/api/gal/bet\")"
    description = "Block bot betting attempts"
  }
}