# Cloudflare Tunnel Configuration Template
# Generated by operator-bootstrap
# Variables: {{TUNNEL_NAME}}, {{DOMAIN}}, {{HOME}}

tunnel: {{TUNNEL_NAME}}
credentials-file: {{HOME}}/.cloudflared/{{TUNNEL_NAME}}.json

# Ingress rules define how traffic is routed
ingress:
  # SSH access via Cloudflare Access
  # Requires Cloudflare Access policy for authentication
  - hostname: ssh.{{DOMAIN}}
    service: ssh://localhost:22

  # Web services (uncomment and modify as needed)
  # - hostname: api.{{DOMAIN}}
  #   service: http://localhost:8080
  #
  # - hostname: dashboard.{{DOMAIN}}
  #   service: http://localhost:3000

  # Catch-all for undefined hostnames
  - service: http_status:404

# Optional: Metrics endpoint
# metrics: localhost:2000

# Optional: Logging
# loglevel: info
# logfile: /var/log/cloudflared.log