From 32b7d5bac16322bcd64d3de8a0f124e5e3993b24 Mon Sep 17 00:00:00 2001 From: Keith Jackson Date: Sun, 8 Nov 2026 15:30:19 -0600 Subject: [PATCH] Added cloudflare creds and tunnel config --- platform/cloudflared/cloudflared-credentials.sops.yaml | 6 +++--- platform/cloudflared/config.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/platform/cloudflared/cloudflared-credentials.sops.yaml b/platform/cloudflared/cloudflared-credentials.sops.yaml index 575ca97..904e23f 100644 --- a/platform/cloudflared/cloudflared-credentials.sops.yaml +++ b/platform/cloudflared/cloudflared-credentials.sops.yaml @@ -9,7 +9,7 @@ metadata: namespace: cloudflared type: Opaque stringData: - credentials.json: ENC[AES256_GCM,data:PM5pgIW/JEUMLuhApkPhgMOkJCL0nrlgLBb3tG+pHdm8JWdNK2yYCZUWM3USY7Uy2IYphZh35RwPOrWSUCyBlSq+TeEKBkzTTgJhp4gqaQ==,iv:Sr0Z6d9LmHvGN5oebIf+YBbFyLIdNOi80d6WwOF3PtU=,tag:Enb5/9v7H1nu2kvh4zEjXg==,type:str] + credentials.json: ENC[AES256_GCM,data:iTCsCQ9g4zouELNa1KzFy8ZO5eLctBdKFaWDXlejpxjWs06sGaduYRPV9kmm1JT8A8s10OevqEEXM+9unOSrmOiUvsxMYAvtwvfyUs3dVbtOB/uCBzHsGK+4cJoC1iII6WzITVe5tlWMXYtyBnDo1Mm3BfO+H/6ytLf750BoABqohO2cfWRfN9MAXL6BFe7urZdKrMou23BooDUxG/pwTpnALbUCer/PhCmrB6cgOw==,iv:ltn/fN59x320pFgvb3/g0UgzBmQcdnnk8JvKpoFn0H0=,tag:fr8s1aDsZBAQYLGXgwG8WA==,type:str] sops: kms: [] gcp_kms: [] @@ -25,8 +25,8 @@ sops: emhHaFpEZWpMN0JXL2NVaW5PU1ZwVW8KkCDX7ED039X12BCmiSqHr0fmZKSZmfjP DIiR6DvWWw1TcB3CjD5q29nIthCDf9zlrpuMfQ+9ODAlRr5t6zP+cg== -----END AGE ENCRYPTED FILE----- - lastmodified: "2026-11-08T18:28:24Z" - mac: ENC[AES256_GCM,data:RGiftdP4Bd5Qwyfx/pXEyZTBzTvr5Tvc7k0foEzTQGiSg6p0meurwtmCe/gMjKUZLhwf/0xqi1DtPQGS6UY8m8YFq1v1nXtohUQWLPXgTukMT915tHmohZeG91wYdyG9kA5E03udn+QNdOiI8OtjKoqAtifBoymCYd/EDOzWLQU=,iv:0vDIoDJ4QGECq7YjUPIlsU1j/AHfr1W32/+RjEOfpWo=,tag:BWT7nxiUxkVhEDh0JiE1Eg==,type:str] + lastmodified: "2026-11-08T21:28:19Z" + mac: ENC[AES256_GCM,data:4wD/6YSBP/e6MTevGSOFTi/EamJRZoryf+aET/opTwjf7yMgi5iObXTnRapKwAFzeXkSkFVfnfRd8Ir714Uez3z2yLxQ6Ygte9VQxHUfkKfXfu+OmuCnjFGaTjsxm6551VPFGHZuto6wZjebwozWuxzHhZi/AjCo2QGyRjmymBM=,iv:hClSAe8r6fhnQzwQY3NZSYhqElzwSRPhI8Y2fH1+r64=,tag:LviWf5oMB6NUjTFNXy62zg==,type:str] pgp: [] encrypted_regex: ^(data|stringData)$ version: 3.9.4 diff --git a/platform/cloudflared/config.yaml b/platform/cloudflared/config.yaml index 62cbbfd..27286e4 100644 --- a/platform/cloudflared/config.yaml +++ b/platform/cloudflared/config.yaml @@ -20,7 +20,7 @@ # OPERATOR STEP: replace REPLACE-ME-TUNNEL-UUID with the UUID printed by `cloudflared tunnel create` # (runbooks/cloudflare-tunnel.md step 3). Until then cloudflared treats the value as a tunnel NAME, # finds no origin certificate to resolve it with, and exits — a CrashLoop in a non-gating tier. -tunnel: REPLACE-ME-TUNNEL-UUID +tunnel: f26f1052-1bc0-4d9d-800b-4da0377472a3 credentials-file: /etc/cloudflared/creds/credentials.json # Serves /metrics (Prometheus), /ready (200 only with >=1 live edge connection) and /healthcheck. metrics: 0.0.0.0:2000 -- 2.54.0