docker run -d \
--name=cloudflare-manager \
-v /var/run/docker.sock:/var/run/docker.sock \
-e CLOUDFLARE_TUNNEL_ID=<TUNNEL_ID> \
-e CLOUDFLARE_API_KEY=<API_KEY> \
-e CLOUDFLARE_ACCOUNT_ID=<ACCOUNT_ID> \
fhriley/cloudflare-manager
To customize some properties of the container, the following environment
variables can be passed via the -e parameter (one for each variable). Value
of this parameter has the format <VARIABLE_NAME>=<VALUE>.
| Variable | Description |
|---|---|
CLOUDFLARE_TUNNEL_ID |
Tunnel ID used when a tunnel is not specified by label. |
CLOUDFLARE_API_KEY |
API token for connecting to the Cloudflare API. This token should have Account:Cloudflare Tunnel:Edit and Zone:DNS:Edit permissions. |
CLOUDFLARE_ACCOUNT_ID |
Cloudflare account ID that owns the tunnel. |
CLOUDFLARE_AUTO_HTTP_HOST_HEADER |
Set to true to automatically set the HTTP Host header to the hostname and the origin server name to the zone name. For example, for the hostname foo.example.com, the Host header will be foo.example.com, and the origin server name will be *.example.com. |
CLOUDFLARE_DEFAULT_SERVICE |
Service used if it is not specified by label. |
| Label | Description | Example |
|---|---|---|
cloudflare.zero_trust.access.tunnel.public_hostname |
Public hostname to add to the tunnel. | service.example.com |
cloudflare.zero_trust.access.tunnel.service |
Service the hostname will proxy to. | http://192.168.1.100:8000 |
cloudflare.zero_trust.access.tunnel.id |
Tunnel ID to add the hostname to. | 423971df-7091-4ed9-85e8-25bb598776ab |
cloudflare.zero_trust.access.tunnel.tls.notlsverify |
Turn off TLS verification for the origin service. | true |
A fully working docker compose example can be found here.