Cloudflare tunnels but only for some ports
reddit / selfhosted

----------------------------------------------------------------------
Kedryn73 · 2023-10-26 09:43

Hi,
i'm running an unraid server with many dockers. I've setup a
Cloudflare Tunnel using the cloudflared docker, but i want only some
of my dockers to be accessible from cloudflare (tipically a range of
10 ports only) and the rest, including the unraid webui, has to be
accessible only from LAN


anyone can point me to the right directo to accomplish that?

​

----------------------------------------------------------------------
martinfgar · 2023-10-26 10:56

You could point the tunnel to a reverse proxy and create hosts for
only the services you want to expose.

----------------------------------------------------------------------
Rorixrebel · 2023-10-26 12:21

This basically. Then the proxy can decide what to send back to the
tunnel

----------------------------------------------------------------------
watchdog_timer · 2023-10-26 12:48

In addition to the proxy method @matinfgar suggested (which I agree is
probably the best option), you can also route by port in the tunnels'
config.yml file.
'

----------------------------------------------------------------------
tylersprice · 2023-10-26 13:49

You can set exactly what services to expose using the zero trust
access dashboard in CloudFlare. I am assuming that the cloudflared
docker.image is preconfigured to expose all docker services? (Is that
true? Seems odd and I recall having to manually set my hosts up when
using cloudflared docker image).

Open CloudFlare dashboard, go to zero trust access sub-dashboard and
select "Tunnels". Create and manage your tunnel from there.

----------------------------------------------------------------------
bobbarker4444 · 2023-10-26 22:28

In the Zero Trust dashboard you can choose exactly which ports are
exposed by the tunnel