Revision 1
Website

@namkyu · Aug 23, 2026, 2:35 AM
Added practical costs, infrastructure, analytics, Google Search indexing, Cloudflare, authentication, operations and monetization for launching and running a real website.
+25,720−0
+Category: Software
+ 
+Page title: Website
+ 
+A website can be launched with very little infrastructure cost, but operating one as a real public service requires more than writing code. Domain and DNS configuration, hosting, HTTPS, analytics, search indexing, authentication, backups, and monetization become separate operational concerns once the site goes live.
+ 
+# Quick Facts
+ 
+ 
+| Item                  | Practical starting point                                                                                |
+| --------------------- | ------------------------------------------------------------------------------------------------------- |
+| Development software  | Free                                                                                                    |
+| Google Analytics      | Free for GA4 properties                                                                                 |
+| Google Search Console | Free                                                                                                    |
+| Cloudflare            | Free plan available                                                                                     |
+| HTTPS                 | Free options available                                                                                  |
+| Google Sign-In        | Google Identity Services                                                                                |
+| Custom domain         | Paid; registration and renewal vary by TLD and registrar                                                |
+| Hosting               | Free tier, VPS, cloud, managed hosting, or self-hosting                                                 |
+| Main monetization     | Advertising, subscriptions, affiliate commissions, sponsorships, paid listings, transactions, donations |
+| Search visibility     | Crawling and indexing are not guaranteed                                                                |
+| Main hidden work      | Deployment, DNS, authentication, indexing, monitoring, backups and maintenance                          |
+ 
+ 
+A functioning website can therefore have very low software costs. The cost profile changes substantially when traffic, storage, database usage, email delivery, APIs, redundancy, moderation, or paid acquisition increase.
+ 
+# Minimum Entry Setup
+ 
+A public website does not necessarily require paid cloud infrastructure.
+ 
+ 
+| Requirement       | Minimum option                                                         | Cost                     | Priority    | Notes                                            |
+| ----------------- | ---------------------------------------------------------------------- | ------------------------ | ----------- | ------------------------------------------------ |
+| Code editor       | [Visual Studio Code](/wiki/visual-studio-code) or equivalent           | Free                     | Essential   | For custom development                           |
+| Source control    | [Git](/wiki/git) + [GitHub](/wiki/github) free account                 | Free                     | Recommended | Version control and deployment workflow          |
+| Framework         | [Next.js](/wiki/nextjs), other open-source framework, or static HTML   | Free                     | Optional    | Depends on site type                             |
+| Database          | [PostgreSQL](/wiki/postgresql) or other open-source database           | Free software            | Optional    | Dynamic sites only                               |
+| Hosting           | Free-tier host or existing hardware                                    | US$0 additional possible | Essential   | Limits depend on provider                        |
+| DNS/CDN           | [Cloudflare](/wiki/cloudflare) Free                                    | Free                     | Recommended | DNS, CDN, DDoS protection and SSL                |
+| HTTPS             | Cloudflare Universal SSL or hosting provider certificate               | Free                     | Essential   | Public sites should use HTTPS                    |
+| Analytics         | [Google Analytics](/wiki/google-analytics)                             | Free                     | Recommended | Visitor and acquisition measurement              |
+| Search monitoring | [Google Search Console](/wiki/google-search-console)                   | Free                     | Recommended | Google crawling, indexing and search performance |
+| Authentication    | [Google Sign-In](/wiki/google-sign-in) or application-managed accounts | Free entry possible      | Optional    | Needed only for user accounts                    |
+ 
+ 
+The major unavoidable cash expense for many small custom websites is therefore the domain rather than the development stack itself. A developer who already owns suitable hardware can also self-host, although this transfers uptime, networking, backups and hardware failure responsibility from a hosting company to the operator.
+ 
+# From Code to a Working Website
+ 
+A locally functioning application is only one part of operating a website.
+ 
+A typical production path is:
+ 
+`Application → Server/Hosting → Domain → DNS → HTTPS/CDN → Analytics → Search indexing → Authentication → Monitoring → Monetization`
+ 
+Each layer can fail independently.
+ 
+For example, an application may be running correctly while the public site is unavailable because DNS points to the wrong address. A site may load normally for users while Google cannot index particular pages. Google login can work in development but fail on the production domain if the OAuth configuration does not match the deployed URLs.
+ 
+This makes deployment and operations materially different from simply completing the application's code.
+ 
+# Hosting
+ 
+There is no single required hosting model.
+ 
+## Managed hosting
+ 
+Platforms such as [Vercel](/wiki/vercel) reduce infrastructure work by handling deployment, HTTPS and parts of the networking stack.
+ 
+This is useful for developers who want to deploy directly from a Git repository without maintaining a Linux server.
+ 
+The trade-off is that infrastructure pricing and platform limits become relevant as usage increases.
+ 
+## VPS
+ 
+A virtual private server gives the operator substantially more control.
+ 
+A typical custom stack can include:
+ 
+- Linux;
+- [Docker](/wiki/docker);
+- a web application;
+- [PostgreSQL](/wiki/postgresql);
+- a reverse proxy such as [Caddy](/wiki/caddy) or [Nginx](/wiki/nginx).
+ 
+The operator becomes responsible for updates, firewall configuration, database backups, storage, monitoring and recovery.
+ 
+## Self-hosting
+ 
+An existing PC or server can host a public website for little or no additional hardware cost.
+ 
+The operator must instead account for:
+ 
+- electricity;
+- residential or business internet reliability;
+- router configuration;
+- public IP or networking configuration;
+- hardware failure;
+- storage failure;
+- backups;
+- power outages;
+- remote recovery.
+ 
+Self-hosting therefore reduces direct hosting expenditure but does not eliminate infrastructure cost or operational work.
+ 
+# Domain, DNS, CDN and HTTPS
+ 
+A custom domain is separate from the server that runs the website.
+ 
+The domain must point users toward the correct infrastructure through DNS.
+ 
+[Cloudflare](/wiki/cloudflare) provides a Free application-services plan with DNS, CDN, unmetered DDoS protection and Universal SSL. Its paid Pro plan is US$20/mo when billed annually or US$25/mo when billed monthly; Business is US$200/mo annually or US$250/mo monthly.
+ 
+This means a small site does not necessarily need to purchase a separate CDN or public TLS certificate.
+ 
+A common configuration is:
+ 
+`Visitor → Cloudflare → Origin server → Application`
+ 
+Cloudflare can proxy public traffic while the origin server remains separately managed.
+ 
+For a self-hosted service, operators can restrict direct access to the origin and allow public web traffic through the proxy, provided the configuration does not unintentionally block legitimate traffic.
+ 
+## `www` and apex domains
+ 
+`example.com` and `www.example.com` are different hostnames.
+ 
+A production site should deliberately decide which is canonical and redirect the other when appropriate.
+ 
+HTTPS, DNS records, reverse-proxy configuration and application URLs need to agree. A configuration can therefore work at:
+ 
+`https://example.com`
+ 
+while failing at:
+ 
+`https://www.example.com`
+ 
+if the second hostname has not been configured correctly.
+ 
+# Traffic Measurement
+ 
+Two Google services commonly used by website operators measure different things.
+ 
+ 
+| Service                                              | What it answers                            | Cost                    |
+| ---------------------------------------------------- | ------------------------------------------ | ----------------------- |
+| [Google Analytics](/wiki/google-analytics)           | Who visits the website and how they use it | Free for GA4 properties |
+| [Google Search Console](/wiki/google-search-console) | How the website performs in Google Search  | Free                    |
+ 
+ 
+They are complementary rather than substitutes.
+ 
+# Google Analytics
+ 
+[Google Analytics](/wiki/google-analytics) can measure website and application interactions across devices and platforms.
+ 
+Useful website measurements include:
+ 
+- users;
+- sessions;
+- landing pages;
+- acquisition channels;
+- countries;
+- events;
+- conversions;
+- user paths.
+ 
+GA4 properties are provided without charge under Google's Analytics terms.
+ 
+Analytics does not tell an operator whether a page has successfully entered Google's search index. That is a Search Console function.
+ 
+# Google Search Console
+ 
+[Google Search Console](/wiki/google-search-console) is Google's free tool for monitoring a site's presence in Google Search.
+ 
+It can show:
+ 
+- whether Google can access the site;
+- crawl and indexing problems;
+- indexed and non-indexed URLs;
+- search impressions;
+- clicks;
+- queries;
+- links;
+- sitemap processing;
+- individual URL inspection.
+ 
+It can also request recrawling of individual URLs.
+ 
+A new website can be completely functional and accessible worldwide while still having little or no Google Search visibility.
+ 
+# Crawling, Indexing and Ranking
+ 
+These are separate stages.
+ 
+`Discovered → Crawled → Indexed → Served/ranked`
+ 
+A page being crawled does not mean it has been indexed.
+ 
+A page being indexed does not mean it will rank for a useful query.
+ 
+Google states that Search works through crawling, indexing and serving results, and that not every processed page is guaranteed to enter the index.
+ 
+For a page to meet Google's minimum technical eligibility, Googlebot must not be blocked, the page must return a successful HTTP `200` response, and it must contain indexable content. Meeting those conditions still does not guarantee indexing.
+ 
+Google also states that crawling after a request can take from several days to several weeks.
+ 
+Repeatedly requesting recrawling of the same unchanged URL does not make Google crawl it faster.
+ 
+# Sitemap
+ 
+An XML sitemap provides search engines with URLs the operator considers important.
+ 
+A simple entry can contain:
+ 
+```xml
+<url>
+  <loc>https://example.com/page</loc>
+  <lastmod>2026-08-23T00:00:00Z</lastmod>
+</url>
+```
+ 
+Google recommends absolute URLs in sitemaps.
+ 
+A single sitemap is limited to 50 MB uncompressed or 50,000 URLs. Larger sites must split the URLs into multiple sitemaps and may use a sitemap index.
+ 
+For a database-backed website, the sitemap can be generated automatically from published pages instead of being manually edited.
+ 
+Sitemaps are particularly useful for new sites with few external links because crawlers may otherwise have fewer paths through which to discover pages.
+ 
+However, sitemap submission is only a signal. Google explicitly states that it does not guarantee crawling or indexing.
+ 
+RSS and Atom feeds can also be submitted as sitemap formats, but they are not required when an XML sitemap already provides the necessary URL discovery mechanism.
+ 
+# robots.txt
+ 
+`robots.txt` controls which parts of a site crawlers may request.
+ 
+A site can allow public content while excluding administrative or editing routes.
+ 
+Example:
+ 
+```text
+User-agent: *
+Allow: /
+Disallow: /api/
+Disallow: /login
+Disallow: /*/edit
+ 
+Sitemap: https://example.com/sitemap.xml
+```
+ 
+An incorrect rule can prevent search crawlers from accessing important content.
+ 
+`robots.txt` and `noindex` also solve different problems: crawling controls whether a crawler may request content, while a `noindex` directive tells supported search engines not to include a page in search results.
+ 
+# Google Login
+ 
+A website that requires user accounts does not necessarily need to maintain its own password system.
+ 
+[Google Sign-In](/wiki/google-sign-in), based on Google Identity Services, lets users authenticate with an existing Google Account.
+ 
+Google's current web setup requires an OAuth 2.0 client ID. The developer creates or selects a project in Google Cloud Console, configures OAuth branding/settings and loads the Google Identity Services client library.
+ 
+Production configuration can involve:
+ 
+- OAuth client ID;
+- application branding;
+- authorized domain;
+- JavaScript origin;
+- redirect URI;
+- consent configuration;
+- backend ID-token verification.
+ 
+A typical production origin might be:
+ 
+`https://example.com`
+ 
+while an authentication framework may use a callback such as:
+ 
+`https://example.com/api/auth/callback/google`
+ 
+The exact callback depends on the application's authentication implementation.
+ 
+A mismatch between the configured URI and the application's URI can prevent authentication even when the rest of the website operates normally.
+ 
+Google Sign-In authenticates the Google user; it does not replace the website's own session and authorization logic. The application still decides what the authenticated user is allowed to do.
+ 
+Authentication should also be distinguished from authorization to Google APIs. Google Identity Services separates signing a user into a website from requesting permission to access additional Google data.
+ 
+# Google Cloud Is Not the Same as Google Login
+ 
+Creating a Google Cloud project for an OAuth client does not mean the website must host its application on [Google Cloud](/wiki/google-cloud).
+ 
+For example, the application may run on:
+ 
+`Self-hosted Linux server`
+ 
+while using:
+ 
+`Google Cloud project → OAuth configuration → Google Sign-In`
+ 
+The server itself can remain completely outside Google Cloud.
+ 
+Likewise, [Google Analytics](/wiki/google-analytics), [Google Search Console](/wiki/google-search-console) and Google Cloud have different purposes despite all being Google services.
+ 
+# Operating Stack Example
+ 
+A small custom content or community website can realistically use a stack such as:
+ 
+ 
+| Layer               | Example                                              |
+| ------------------- | ---------------------------------------------------- |
+| Application         | [Next.js](/wiki/nextjs)                              |
+| Database            | [PostgreSQL](/wiki/postgresql)                       |
+| Containers          | [Docker](/wiki/docker)                               |
+| Reverse proxy       | [Caddy](/wiki/caddy)                                 |
+| DNS/CDN             | [Cloudflare](/wiki/cloudflare)                       |
+| HTTPS               | Caddy and/or Cloudflare                              |
+| Authentication      | [Google Sign-In](/wiki/google-sign-in)               |
+| Traffic measurement | [Google Analytics](/wiki/google-analytics)           |
+| Search monitoring   | [Google Search Console](/wiki/google-search-console) |
+| Search discovery    | XML sitemap + crawlable internal links               |
+ 
+ 
+Most of these components have a free option or are open-source. Infrastructure cost therefore does not necessarily become large before a site has substantial traffic.
+ 
+The more important early cost can be development and maintenance time.
+ 
+# How It Makes Money
+ 
+A website is a distribution mechanism rather than a single business model.
+ 
+Revenue depends on what the site provides and what economic action occurs after traffic arrives.
+ 
+Common models include:
+ 
+ 
+| Model               | Revenue event                       | Common fit                       |
+| ------------------- | ----------------------------------- | -------------------------------- |
+| Display advertising | Ad impression/click ecosystem       | Content, Wiki, forum             |
+| Affiliate           | Referred purchase or action         | Reviews, comparisons, guides     |
+| Subscription        | Recurring user payment              | SaaS, premium information, tools |
+| Paid listing        | Business pays for placement/listing | Directory, marketplace           |
+| Transaction fee     | Transaction completed               | Marketplace/platform             |
+| Sponsorship         | Direct sponsor agreement            | Community/content                |
+| Digital product     | Product purchase                    | Education, templates, data       |
+| Donation/membership | Voluntary or member payment         | Community, open knowledge        |
+ 
+ 
+Traffic alone is therefore not revenue.
+ 
+Two websites with the same monthly visitors can have radically different economics depending on visitor geography, purchase intent, advertising niche, conversion rate, pricing and revenue model.
+ 
+# Advertising
+ 
+Display advertising is one of the easiest monetization models to understand operationally because revenue can begin without building a proprietary payment product.
+ 
+[Google AdSense](/wiki/google-adsense) is one example, but advertising economics should be evaluated using publisher-side metrics such as RPM rather than advertiser CPM.
+ 
+For a content site:
+ 
+`Page RPM = estimated publisher revenue / page views × 1,000`
+ 
+A site with substantial traffic can still generate weak advertising revenue when visitors come from low-value advertising markets or when the content has little commercial intent.
+ 
+Advertising also creates a trade-off between monetization and user experience because additional placements can increase visual clutter and page weight.
+ 
+# Affiliate Revenue
+ 
+Affiliate monetization works best when a page sits close to a purchasing decision.
+ 
+Examples include:
+ 
+- product comparisons;
+- software comparisons;
+- hosting recommendations;
+- equipment guides;
+- business-service directories.
+ 
+The economically important values are not raw traffic alone but:
+ 
+`Visitors × outbound-click rate × merchant conversion rate × commission`
+ 
+A smaller high-intent website can therefore be more valuable than a larger general-information site.
+ 
+Actual commission rates and attribution windows should be checked against each affiliate program rather than assumed across the industry.
+ 
+# Subscription and Premium Features
+ 
+Subscriptions can reduce dependence on advertising but require a reason for users to pay repeatedly.
+ 
+Web products commonly place payment around:
+ 
+- premium tools;
+- additional data;
+- advanced search;
+- saved workflows;
+- team features;
+- higher usage limits;
+- removal of advertising;
+- professional features.
+ 
+This changes the important metric from page views toward paying conversion, churn and revenue per customer.
+ 
+# Wiki and Community Monetization
+ 
+Wiki and user-generated-content sites have additional monetization options because contributors can continuously expand the site's searchable content.
+ 
+[Fandom](/wiki/fandom) is an example of a for-profit Wiki platform whose business includes advertising and commercial partnerships.
+ 
+Other knowledge/community projects may instead use donations, memberships, subscriptions or combinations of these models.
+ 
+The existence of a large Wiki does not establish that a new Wiki can reproduce its economics. Community size, search distribution, moderation cost and accumulated content are major differences.
+ 
+# Search Traffic as an Asset
+ 
+A content-heavy website can accumulate pages that independently receive search impressions.
+ 
+For example:
+ 
+```text
+/wiki/topic-a
+/wiki/topic-b
+/wiki/topic-c
+...
+```
+ 
+Each page becomes another potential search entry point.
+ 
+This makes structured Wiki, directory and database models different from a small fixed marketing website: adding useful pages expands the site's searchable surface area.
+ 
+However, creating URLs alone does not create search traffic. Google explicitly states that sitemap submission does not guarantee indexing, and indexing itself does not guarantee that a page will be served prominently for a query.
+ 
+# Costs
+ 
+The first version of a website can be unusually cheap because many infrastructure components have free tiers.
+ 
+Costs tend to appear as the service grows.
+ 
+## Fixed or low-volume costs
+ 
+Common early expenses include:
+ 
+- domain registration and renewal;
+- VPS or hosting;
+- backup storage;
+- transactional email;
+- premium SaaS tools.
+ 
+## Usage-based costs
+ 
+Costs that can grow with activity include:
+ 
+- compute;
+- bandwidth;
+- database capacity;
+- object storage;
+- email volume;
+- AI/API calls;
+- monitoring/log retention;
+- payment processing.
+ 
+## Human costs
+ 
+For community and Wiki sites, infrastructure may eventually be cheaper than:
+ 
+- moderation;
+- spam handling;
+- abuse prevention;
+- copyright requests;
+- user support;
+- content verification.
+ 
+These costs are easy to omit from an initial hosting calculation.
+ 
+# Practical Problems After Launch
+ 
+## DNS and SSL mismatch
+ 
+A site may work on one hostname but fail on another.
+ 
+Apex and `www` records, certificates, redirects, reverse-proxy configuration and application base URLs should describe the same production setup.
+ 
+## OAuth works locally but fails in production
+ 
+Localhost and the production domain are different OAuth environments.
+ 
+Production origins and callback URLs need to be configured correctly.
+ 
+## Google crawls but does not index
+ 
+Server logs or Search Console may show Googlebot requests while individual pages remain outside the index.
+ 
+This is possible because crawling and indexing are separate stages.
+ 
+## Analytics and Search Console disagree
+ 
+This is expected because they measure different systems.
+ 
+Analytics measures website usage; Search Console measures Google Search visibility and search-originating activity.
+ 
+## Origin works but CDN configuration fails
+ 
+When a proxy/CDN sits between users and the origin:
+ 
+`User → CDN → Origin`
+ 
+either connection can fail.
+ 
+An origin TLS problem can therefore produce an error even though the application process itself is running.
+ 
+# Requirements
+ 
+A basic public website should have:
+ 
+- a publicly reachable host;
+- a domain or provider URL;
+- valid HTTPS for normal production use;
+- working DNS;
+- a deployment process;
+- backups for data that cannot be recreated.
+ 
+A website seeking Google Search traffic should additionally ensure that:
+ 
+- Googlebot is not blocked;
+- indexable pages return HTTP `200`;
+- important pages contain indexable content;
+- internal links are crawlable;
+- canonical URLs are intentional;
+- important URLs are discoverable.
+ 
+A website with accounts must additionally maintain application-level sessions, authorization and account data even when an external identity provider handles authentication.
+ 
+# Risks / Things to Know
+ 
+## Search traffic can take time to appear
+ 
+Google states that crawling can take several days to several weeks after a request, and neither a crawl request nor a sitemap guarantees indexing.
+ 
+A newly launched content business should therefore not treat immediate organic search traffic as guaranteed distribution.
+ 
+## Free infrastructure does not mean zero operating cost
+ 
+A project may launch using free analytics, CDN, SSL, frameworks and database software but later incur hosting, storage, email, API and moderation expenses.
+ 
+## Self-hosting transfers responsibility
+ 
+Self-hosting can reduce hosting bills but makes power, internet connectivity, hardware, firewall configuration, updates and recovery the operator's responsibility.
+ 
+## Authentication adds policy and account-management work
+ 
+External login removes the need to directly authenticate passwords but does not remove the need for application sessions, permissions, account deletion and privacy handling.
+ 
+## A working website is not necessarily a discoverable website
+ 
+A page can load correctly for users worldwide and still receive no meaningful Google traffic. Public availability, crawlability, indexing and ranking are separate conditions.
+ 
+# Sources
+ 
+- [Google Search Central — How Google Search Works](https://developers.google.com/search/docs/fundamentals/how-search-works)
+- [Google Search Central — Crawling and Indexing FAQ](https://developers.google.com/search/help/crawling-index-faq)
+- [Google Search Central — Ask Google to Recrawl Your URLs](https://developers.google.com/search/docs/crawling-indexing/ask-google-to-recrawl)
+- [Google Search Central — Sitemaps Overview](https://developers.google.com/search/docs/crawling-indexing/sitemaps/overview)
+- [Google Search Central — Build and Submit a Sitemap](https://developers.google.com/search/docs/crawling-indexing/sitemaps/build-sitemap)
+- [Google Search Console Help — About Search Console](https://support.google.com/webmasters/answer/9128668)
+- [Google Analytics](https://marketingplatform.google.com/about/analytics/)
+- [Google Analytics Terms of Service](https://marketingplatform.google.com/about/analytics/terms/us/)
+- [Google Identity Services — Overview](https://developers.google.com/identity/gsi/web/guides/overview)
+- [Google Identity Services — Setup](https://developers.google.com/identity/gsi/web/guides/get-google-api-clientid)
+- [Cloudflare — Plans](https://www.cloudflare.com/plans/)
+- [Cloudflare — Free Plan](https://www.cloudflare.com/plans/free/)