Docker / Podman compose example for Cloudflared

cloudflared-docker-compose.yml

version: '3'

services:
  cloudflared:
    image: cloudflare/cloudflared:latest
    network_mode: host
    # volumes:
    #   - ./config/config.yml:/etc/cloudflared/config.yml
    #   - ./config/<YOUR_TUNNEL_UUID>.json:/etc/cloudflared/creds.json

    environment:
      # Output format for the logs (default, json) (default: "default")
      # TUNNEL_MANAGEMENT_OUTPUT: "json"
      # TUNNEL_LOG_OUTPUT: "json"

      # Filepath at which to read/write the tunnel credentials
      # TUNNEL_CRED_FILE: "/etc/cloudflared/creds.json"

      # Cloudflare Edge region to connect to. Omit or set to empty for global.
      # TUNNEL_REGION: ""

      # Cloudflare Edge IP address version to connect with. {4, 6, auto} (default: "4")
      # TUNNEL_EDGE_IP_VERSION: "auto"

      # Bind to IP address for outgoing connections to Cloudflare Edge.
      # TUNNEL_EDGE_BIND_ADDRESS: "::"

      # Label for a specific connector (not an environment variable listed in your reference,
      # but useful for identifying instances) - typically set via command line flag --connector-id-label

      # When given creates an experimental post-quantum secure tunnel (default: false)
      # TUNNEL_POST_QUANTUM: "false" # "true" or "false"

      # Enables the in-depth diagnostic routes to be made available over the management service
      # (/debug/pprof, /metrics, etc.) (default: true)
      # TUNNEL_MANAGEMENT_DIAGNOSTICS: "true" # "true" or "false"

      # Overwrites existing DNS records with this hostname (default: false)
      # TUNNEL_FORCE_PROVISIONING_DNS: "false" # "true" or "false"

      # TUNNEL_RUN_TUNNEL_ID: "YOUR_TUNNEL_UUID"

      TUNNEL_TOKEN: "YOUR_TUNNEL_TOKEN" # <<< REPLACE THIS

    restart: unless-stopped
    command: tunnel run