Configure Cloudflare Tunnel to publicly serve

...services from homelab

hosts/nixedo/configuration.nix

@@ -20,6 +20,7 @@
 
     ./modules/acme.nix
     ./modules/audiobookshelf.nix
+    ./modules/cloudflared.nix
     ./modules/containers
     ./modules/forgejo.nix
     ./modules/immich.nix

hosts/nixedo/modules/cloudflared.nix

@@ -0,0 +1,18 @@
+{ config, ... }:
+
+{
+  services.cloudflared = {
+    enable = true;
+
+    tunnels."e1514105-327f-4984-974e-e2fbaca76466" = {
+      credentialsFile = config.age.secrets.cloudflared.path;
+      default = "http_status:404";
+
+      ingress = {
+        "test.oliverdavies.uk" = {
+          service = "http://localhost:8000";
+        };
+      };
+    };
+  };
+}

hosts/nixedo/secrets.nix

@@ -1,6 +1,7 @@
 {
   age.secrets = {
     cloudflare.file = ../../secrets/cloudflare.age;
+    cloudflared.file = ../../secrets/cloudflared-credentials.age;
     tubearchivist.file = ../../secrets/tubearchivist.age;
   };
 }