Apps / System

Cloudflare Tunnel

Cloudflare Tunnel client

Contains the command-line client for Cloudflare Tunnel, a tunneling daemon that proxies traffic from the Cloudflare network to your origins. This daemon sits between Cloudflare network and your origin (e.g. a webserver). Cloudflare attracts client requests and sends them to you via this daemon, without requiring you to poke holes on your firewall --- your origin can remain as closed as possible.

Installing it

Open the dashboard, go to Apps, press Add on it and apply the change. Or from a terminal on the box:

sudo homebox install tunnel

Good to know

• Create the tunnel at one.dash.cloudflare.com → Networks → Tunnels, then paste its token into Settings. The token IS the credential — anyone holding it can publish through your tunnel
• Point a public hostname at the container name, not the LAN IP: http://vaultwarden:80, http://linkding:9090. cloudflared shares a docker network with them, so it resolves those by name
• Anything you publish this way is reachable by the whole internet. Put Cloudflare Access in front of any app whose own login you would not want brute-forced
• This is what makes Vaultwarden usable: its vault needs HTTPS to decrypt in the browser, and the tunnel gives it a real certificate at the edge

View this app's definition on GitHub