services:
  cloudflared:
    image: cloudflare/cloudflared:2026.7.3
    container_name: cloudflared
    restart: unless-stopped
    command: tunnel --protocol http2 run
    volumes:
      - ./config.yml:/etc/cloudflared/config.yml:ro
      - ./credentials.json:/etc/cloudflared/credentials.json:ro
    labels:
      - "xiteng.site.component.cloudflare-tunnel.enabled=true"
      - "xiteng.site.component.cloudflare-tunnel.name=Cloudflare Tunnel"
      - "xiteng.site.component.cloudflare-tunnel.description=将 xiteng.site 与通配子域的公网流量送入 Traefik。"
      - "xiteng.site.component.cloudflare-tunnel.section=infrastructure"
      - "xiteng.site.component.cloudflare-tunnel.category=边缘与网络"
      - "xiteng.site.component.cloudflare-tunnel.endpoint=*.xiteng.site → Traefik"
      - "xiteng.site.component.cloudflare-tunnel.access=internal"
      - "xiteng.site.component.cloudflare-tunnel.access-label=基础设施"
      - "xiteng.site.component.cloudflare-tunnel.icon=CF"
      - "xiteng.site.component.cloudflare-tunnel.icon-url=https://cdn.simpleicons.org/cloudflare"
      - "xiteng.site.component.cloudflare-tunnel.accent=yellow"
      - "xiteng.site.component.cloudflare-tunnel.order=100"
    networks:
      - homelab_net

networks:
  homelab_net:
    external: true