# Cloudflare Tunnel — HTTPS am Edge, kein Port-Forwarding noetig.
# Token wird per systemd EnvironmentFile gesetzt (deploy/env.homelab).
#
# Zero Trust Dashboard:
#   Networks → Tunnels → Create → Cloudflared
#   Public Hostname: trilogyhub.de → http://127.0.0.1:3080
#   Tunnel-Token in CLOUDFLARE_TUNNEL_TOKEN eintragen
#
# Hinweis: Hostnames im Zero-Trust-Dashboard eintragen (Token-Install).
# Cloudflare-DDNS meldet WAN-IP fuer home.trilogyhub.de (optional).

tunnel: playbull
credentials-file: /etc/cloudflared/playbull.json

ingress:
  - hostname: trilogyhub.de
    service: http://127.0.0.1:3080
    originRequest:
      noTLSVerify: true
      httpHostHeader: trilogyhub.de
  - hostname: www.trilogyhub.de
    service: http://127.0.0.1:3080
    originRequest:
      noTLSVerify: true
      httpHostHeader: www.trilogyhub.de
  - service: http_status:404