Cloudflared with network_mode: host cant be deployed

[M4rshe1]

To Reproduce

1. Select Cloudfalred Template
2. Configure env
3. Deploy

Current vs. Expected behavior

Dokpoy adds networks to the cloudfared container that has network_mode: host

The compose that is generated by Dokpoy should not add networks to a container if it has the network_mode: host key set.

Provide environment information

OS: Debian GNU/Linux 12 (bookworm)
arch: aarch64
Hardware: Pi5 8gb
Dokploy Version: v0.29.2
Serviece: Cloudflared

Which area(s) are affected? (Select all that apply)

Docker Compose

Are you deploying the applications where Dokploy is installed or on a remote server?

Same server where Dokploy is installed

Additional context

#663

Will you send a PR to fix it?

No

[dosubot]

Hi @M4rshe1! I'm Dosu and I’m helping the dokploy team.

This is a confirmed bug. Dokploy's network injection logic unconditionally adds networks to all Docker Compose services without checking for network_mode: host, which Docker treats as mutually exclusive with custom networks.

The issue occurs in three functions that modify the compose spec before deployment:

• addDokployNetworkToService() in packages/server/src/utils/docker/domain.ts [1]
• addAppNameToServiceNetworks() in packages/server/src/utils/docker/compose/network.ts [2]
• addSuffixToServiceNetworks() [3]

None of these check service.network_mode before injecting networks. The Cloudflared template explicitly sets network_mode: host, which is required for the tunnel to work.

Workaround: Disabling isolated deployments in the compose settings won't fully resolve this — it changes which networks get injected (dokploy-network instead of app-specific ones), but networks are still added regardless [4].

Fix: Each of those functions should skip network injection when network_mode is set to host (or other modes like container:<name>, service:<service>, or none). Something like:

if (service.network_mode === 'host') {
  return; // Skip network injection
}

There's also a related issue on the templates repo requesting that templates be able to opt out of isolated deployments [5].

To reply, just mention @dosu.

---

Share context across your team and agents. Try Dosu.