cloudflared

Cloudflared

Runs a Cloudflare Tunnel to securely expose internal Docker services to the internet without opening ports on the host.

This service creates the shared cloudflare-exposed bridge network. Any service that needs external access must join this network.

The tunnel also attaches to the dokploy-network so it can reach services that are only published on that network (those that don't declare cloudflare-exposed). Dokploy provides dokploy-network automatically on deploy.

How It Works

1. The cloudflared container establishes a tunnel using your Cloudflare token.
2. The cloudflare-exposed Docker network is created and shared across services.
3. Services attached to this network become reachable through Cloudflare.
4. Routes and access policies are managed in the Cloudflare Zero Trust dashboard.

Environment Variables

Variable	Description
CLOUDFLARE_TUNNEL_TOKEN	Tunnel token from Cloudflare Zero Trust

Connecting a Service

Add the cloudflare-exposed network to any service you want to expose:

services:
  my-service:
    image: example/my-service:latest
    networks:
      - cloudflare-exposed

networks:
  cloudflare-exposed:
    external: true

Useful Resources

• Cloudflare Tunnel docs
• cloudflared GitHub repository