# Cloudflare Tunnel Configuration for {{ site_name }}
# Generated by Ansible

tunnel: {{ site_name }}-tunnel
credentials-file: /etc/cloudflared/{{ site_name }}-tunnel.json

ingress:
  # Proxmox Web UI
  - hostname: {{ node_name }}.yourdomain.com
    service: https://{{ node_name }}.local:8006
    originRequest:
      noHappyEyeballs: true
      connectTimeout: 30s
      tls:
        skipVerify: true
      httpHostHeader: {{ node_name }}.local:8006

  # Proxmox API
  - hostname: {{ node_name }}-api.yourdomain.com
    service: https://{{ node_name }}.local:8006
    originRequest:
      noHappyEyeballs: true
      connectTimeout: 30s
      tls:
        skipVerify: true
      httpHostHeader: {{ node_name }}.local:8006

  # Prometheus Exporter
  - hostname: {{ node_name }}-metrics.yourdomain.com
    service: http://localhost:9221
    originRequest:
      noHappyEyeballs: true
      connectTimeout: 30s

  # Catch-all rule (must be last)
  - service: http_status:404

# Logging
loglevel: info
logfile: /var/log/cloudflared/{{ site_name }}-tunnel.log

# Metrics
metrics: 0.0.0.0:9090

# Health check
health-probe:
  enabled: true
  path: /health
  port: 8080