Cloudflared for Home Assistant (app)

About

Cloudflared is an app that connects Home Assistant to the internet through a Cloudflare Tunnel. It lets a domain or subdomain at Cloudflare reach the instance without opening any ports on the router. Two tunnel modes exist: a local tunnel that the app creates and manages, and a remote tunnel created in the Cloudflare dashboard, where the app is given its token. In local mode, an additional hosts option routes other services, such as a router or a diskstation, through the same tunnel, and DNS entries are created automatically at Cloudflare. Cloudflare Zero Trust can be used to secure the connection further. The app needs Home Assistant OS, runs on aarch64 and amd64, and has access to the Supervisor API.

Automatic summary of the docs and configuration of brenner-tobias/ha-addons. Something wrong, or are you the maintainer and want your own text here? Get in touch

Supports

Actively maintained Its author released or pushed a change in the last six months.

Setting it up

Add its app repository under Settings, Apps, then install and start it.

From the docs

Cloudflared connects your Home Assistant Instance via a secure tunnel to a domain or subdomain at Cloudflare. This allows you to expose your Home Assistant instance and other services to the Internet without opening ports on your router. Additionally, you can utilize Cloudflare Zero Trust to further secure your connection.

From the docs of brenner-tobias/ha-addons, MIT License. Shortened.

Permissions

Supervisor APICan talk to the Supervisor, which manages apps and the system.

Configuration

Log LevelDefines the log level for the app.
External Home Assistant HostnameSet this to your domain name or subdomain that you want to use to access Home Assistant.
Cloudflare Tunnel NameDefines the name of the tunnel created for the communication between this service and the Cloudflare edge server. The default value should be fine in most use cases.
Additional HostsDefine a list of additional hosts to be routed by the Cloudflare Tunnel.
Use Post-Quantum CryptographyCheck to make the tunnel use Post-Quantum Cryptography. Warning: This also restricts the tunnel to QUIC, which might lead to problems for some users.
Add run parametersPossibility to add run parameters to Cloudflared
Catch-All ServiceDefine a catch-all service which will be called for services not configured directly.
Enable Catch-All Nginx-Proxy-ManagerSets the catch-all service to the "Nginx-Proxy-Manager Community App".
Cloudflare Tunnel TokenWhen set all other options will be ignored. Use this option if you set up the tunnel with the Cloudflare Dashboard.