DietPi-Software | Cloudflared

[peejmio]

• Software title | Cloudflared (Formerly Argo Tunnel)
• Short description | creates an encrypted tunnel between your origin web server and Cloudflare’s nearest data center, all without opening any public inbound ports. // exposes local servers behind NATs and firewalls to the public internet over Cloudflare network
• Official URL | https://www.cloudflare.com/products/tunnel/
• GitHub URL | https://github.com/cloudflare/cloudflared
• Official install documentation | https://developers.cloudflare.com/cloudflare-one/connections/connect-apps/install-and-setup/tunnel-guide/

Are there similar/alternative software titles available with DietPi-Software?

No

What makes your requested software better than the above solutions, if available?

<!- It is fully open source, without any limitation to free users. Free alternative to paid ngrok -->

• ...

How can DietPi make the installation easier or compatible, than following the install instructions or do APT installation, if available?

• ...

Can you provide the installation steps that you would suggest DietPi-Software to do?

1. Install cloudflared
2. Point your domain to cloudflare nameserver
3. authenticate cloudflared
4. configure config.yml with ingress settings to point to your apps specific port with hostname,
5. intall cloudflared as service

Are you willing to help maintaining the software installation, e.g. in case of needed setup changes due to updates etc.? This is not needed, but could speed up our decision to implement it, as man power is always a topic 😉.

Yes, I could help out with this if I have extra time but I'm not that expert in coding

[peejmio]

sample config

tunnel: --------------------------------
credential-file: /root/.cloudflared/--------------------------.json
no-autoupdate: true
ingress:
  - hostname: your.domain
    service: http://localhost:80
  - hostname: pi.your.domain
    service: ssh://localhost:22
  - hostname: dl.your.domain
    service: http://localhost:9091
  - hostname: medusa.your.domain
    service: http://localhost:8081
  - hostname: plex.your.domain
    service: http://localhost:32400
  - hostname: tau.your.domain
    service: http://localhost:8181
  - service: http_status:404

[MichaIng]

Just to clarify: cloudflared can be used as well as DNS proxy for DoT and DoH only, even with every other public DNS provider, not Cloudflare only. That way it is an alternative to Unbound. But you want it as full tunnel to Cloudflare to make non HTTP ports of your Cloudflare-protected server accessible through Cloudflare as well, right?

[peejmio]

yes, cloudflare can also force https to all sites. I use cloudflared as an alternative to ngrok,io, same function but for free. It has zero trust for ssh on your device too.

[MichaIng]

For web services and HTTPS redirect, cloudflared is not required but it can be enabled on the webserver itself and on Cloudflare for visitors regardless whether the webserver supports it or not. It is required only when you use other web applications, like if you want to access SSH or other non-HTTP ports on your server protected by Cloudflare proxy DDoS protection etc. It however requires a paid subscription. The free plan doesn't cover it, so a Cloudflare controlled domain then needs to have the proxy disabled for any other port than 80/443 to work.

But this is what you do, I missed your second post where you illustrate access to such other ports. Just wanted to be sure I understood correctly how you want cloudflared to be setup.

[peejmio]

take a look at ngrok.io, it has the same function but cloudflared offers it for free.

[jonyskids]

Any develpoment is this area? This would be great to be able to do!

https://youtu.be/ey4u7OUAF3c

[MichaIng]

Woah, that video has a far too long Red Hat advertising passage. I mean advertising is fine if the content is good, but this is over one minute just about Red Hat 😄.

Currently Cloudflared has no priority for myself. There are other software requests far higher voted. But I'll, as always, support anyone who does a start. Have a look here on how to implement new software options: https://github.com/MichaIng/DietPi/wiki/How-to-add-a-new-software-title

And btw, we'd definitely not use the Docker container overkill (as done in the video) but the Debian package for such a small trivial binary 😉.