Cloudflared

Description / name	Input element
Container Registry
Cloudflared Host Port

Tunneling daemon that proxies any local webserver through the Cloudflare network without DNS records or firewall changes.


Port	`2000`
Registry	`ghcr.io/daemonless/cloudflared`
Daemonless	daemonless/cloudflared
Source	cloudflare/cloudflared
Website	developers.cloudflare.com/cloudflare-one/connections/connect-apps

Version Tags

Tag	Description	Best For
`latest` / `pkg`	FreeBSD Quarterly. Uses stable, tested packages.	Most users. Matches Linux Docker behavior.
`pkg-latest`	FreeBSD Latest. Rolling package updates.	Newest FreeBSD packages.
Podman on FreeBSD currently requires root. All commands must be run as root (or via `doas`/`sudo`).

Before deploying, ensure your host environment is ready. See the Quick Start Guide for host setup instructions.

Deployment

Podman Compose AppJail Director Podman CLI Ansible

services:
  cloudflared:
    image: ghcr.io/daemonless/cloudflared:latest
    container_name: cloudflared
    environment:
      - TUNNEL_TOKEN=YOUR_CLOUDFLARE_TOKEN_HERE
      - TUNNEL_METRICS=0.0.0.0:2000
    ports:
      - 2000:2000
    restart: unless-stopped

DIRECTOR_PROJECT=cloudflared
TUNNEL_TOKEN=YOUR_CLOUDFLARE_TOKEN_HERE
TUNNEL_METRICS=0.0.0.0:2000

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  cloudflared:
    name: cloudflared
    options:
      - container: 'boot args:--pull'
    oci:
      user: root
      environment:
        - TUNNEL_TOKEN: !ENV '${TUNNEL_TOKEN}'
        - TUNNEL_METRICS: !ENV '${TUNNEL_METRICS}'

ARG tag=latest

OPTION overwrite=force
OPTION from=ghcr.io/daemonless/cloudflared:${tag}

podman run -d --name cloudflared \
  -p 2000:2000 \
  -e TUNNEL_TOKEN=YOUR_CLOUDFLARE_TOKEN_HERE \
  -e TUNNEL_METRICS=0.0.0.0:2000 \
  ghcr.io/daemonless/cloudflared:latest

- name: Deploy cloudflared
  containers.podman.podman_container:
    name: cloudflared
    image: ghcr.io/daemonless/cloudflared:latest
    state: started
    restart_policy: always
    env:
      TUNNEL_TOKEN: "YOUR_CLOUDFLARE_TOKEN_HERE"
      TUNNEL_METRICS: "0.0.0.0:2000"
    ports:
      - "2000:2000"

Interactive Configuration

Parameters

Environment Variables

Variable	Default	Description
`TUNNEL_TOKEN`	`YOUR_CLOUDFLARE_TOKEN_HERE`	Required: The Cloudflare Tunnel token.
`TUNNEL_METRICS`	`0.0.0.0:2000`	Optional: Address to bind metrics server (default: 0.0.0.0:2000)

Ports

Port	Protocol	Description
`2000`	TCP

Implementation Details

Architectures: amd64
User: root (UID/GID set via PUID/PGID). Defaults to 1000:1000.
Base: Built on ghcr.io/daemonless/base (FreeBSD 15.0).

Need help? Join our Discord community.