Tools

cloudflared config generator

Describe the services you want to publish and get a validated config.yml, the commands to bring the tunnel up and a sandboxed systemd unit. Nothing is uploaded.

Your tunnel

Printed by cloudflared tunnel create. The one above is an example.

Services to publish

What the generator does and does not do

It writes a locally-managed tunnel configuration: a file on your server that lists which hostnames go to which services. It always ends the ingress list with a catch-all that returns http_status:404, because cloudflared refuses to start without one, and because an unlisted hostname should get a plain 404.

Skipping origin certificate verification is offered for HTTPS services that use a self-signed certificate. It is a last resort, since it removes the check that you are talking to the service you think you are. Setting the origin server name, or trusting your own certificate authority, is the safer fix.

New to this? Read Cloudflare Tunnel from scratch first, then come back to generate your own files.