docs.facundoitest.space

1. Download the `.deb` package:

wget https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64.deb

1. Install the package using `dpkg`:

sudo dpkg -i cloudflared-linux-amd64.deb

1. Verify the installation:

cloudflared --version

1. Run the following command to log in and create a tunnel:

cloudflared tunnel login

1. The authentication process will prompt you to open a URL in your browser to log in with your Cloudflare account.

1. Create the tunnel and give it a name:

cloudflared tunnel create my-tunnel

1. Note the tunnel ID and the location of the `cert.pem` file, which will be used for routing traffic.

1. Create a configuration file:

sudo nano /etc/cloudflared/config.yml

1. Example configuration:

tunnel: 72a29ddd-7ef4-46e3-97ef-cc4d8e3fc2ba
credentials-file: /home/facundo/.cloudflared/72a29ddd-7ef4-46e3-97ef-cc4d8e3fc2ba.json

ingress:
    - hostname: *.facundoitest.space
      service: http://192.168.88.250:443
    - service: http_status:404

1. Start the tunnel:

sudo cloudflared tunnel run my-tunnel

1. Ensure the tunnel is active and routing traffic correctly.

1. Update the NGINX configuration on your Raspberry Pi to handle requests coming from the tunnel.

1. Create a systemd service file:

sudo nano /etc/systemd/system/cloudflared.service

1. Add the following configuration:

[Unit]
Description=Cloudflare Tunnel
After=network.target

[Service]
Type=simple
User=facundo
ExecStart=/usr/local/bin/cloudflared tunnel run my-tunnel
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target

1. Enable and start the service:

sudo systemctl daemon-reload
sudo systemctl enable cloudflared
sudo systemctl start cloudflared

1. Check the status of the service:

sudo systemctl status cloudflared

1. Ensure that the tunnel is running and NGINX is properly handling requests by checking the logs and testing the subdomains.

Following these steps will ensure that your `cloudflared` tunnel is correctly set up on your LXC and that it integrates smoothly with your existing reverse proxy setup on your Raspberry Pi.