homelab/cloudflare/README.md

README

Cloudflare infrastructure to (safely) expose the homelab services to the outside internet via Cloudflare Zero Trust Tunnel.

Initial Setup

0. (pre-req) Cloudflare account and a domain name
1. Transfer domain from registrar to Cloudflare by creating the NS records
   • NS lloyd.ns.cloudflare.com
   • NS meadow.ns.cloudflare.com
2. Create an API token with the following access rules
   • DNS:Edit
   • Cloudflare Tunnel:Edit
   • Zero Trust:Edit
   • Access: Apps and Policies:Edit

Usage

To add a new app/service and expose it:

0. (pre-req) have a cloudflared authorized and running
1. deploy the app
2. describe it in the services
3. tofu apply

TODO

• Automate token creation and/or deployment of cloudflared.