Nerdy Drunk

Drunk on technology

User Tools

Site Tools


cloudflare:zero_trust_docker

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
cloudflare:zero_trust_docker [2022/10/03 15:59] – created tingallscloudflare:zero_trust_docker [2025/10/24 17:53] (current) tingalls
Line 1: Line 1:
 ===== Cloudflare Zero Trust Docker ===== ===== Cloudflare Zero Trust Docker =====
-{{tag>linux cloudflare dockerubuntu}}+{{tag>linux cloudflare docker ubuntu}}
  
 Using host networking may not be the most secure way, but it is what was needed to get WARP routing when using quic to be able to proxy UDP traffic for proper DNS lookups on the private networks. Using host networking may not be the most secure way, but it is what was needed to get WARP routing when using quic to be able to proxy UDP traffic for proper DNS lookups on the private networks.
Line 13: Line 13:
 <code sh> <code sh>
 running_container=$(docker container ls -f ancestor=cloudflare/cloudflared:latest -q) running_container=$(docker container ls -f ancestor=cloudflare/cloudflared:latest -q)
 +running_image=$(docker image ls --filter=reference=cloudflare/cloudflared -q)
 +running_token=$(docker inspect $running_container --format='{{(index .Config.Cmd 4)}}')
 docker pull cloudflare/cloudflared:latest docker pull cloudflare/cloudflared:latest
-docker run --network host -d --restart=unless-stopped  cloudflare/cloudflared:latest tunnel --no-autoupdate run --token <CLOUDFLARE_TUNNEL_TOKEN>+docker run --network host -d --restart=unless-stopped  cloudflare/cloudflared:latest tunnel --no-autoupdate run --token $running_token
 docker container ls -f ancestor=cloudflare/cloudflared:latest -a # verify two running docker container ls -f ancestor=cloudflare/cloudflared:latest -a # verify two running
 +docker container ls -f ancestor=$running_image -a # verify two running
 docker stop $running_container docker stop $running_container
-# reconnect+
 +# reconnect if disconnected 
 +#
 old_image=$(docker image ls --filter=reference=cloudflare/cloudflared --filter=dangling=true --format {{.ID}}) old_image=$(docker image ls --filter=reference=cloudflare/cloudflared --filter=dangling=true --format {{.ID}})
 old_container=$(docker container ls -f ancestor=$old_image -f status=exited -q) old_container=$(docker container ls -f ancestor=$old_image -f status=exited -q)
cloudflare/zero_trust_docker.1664812773.txt.gz · Last modified: by tingalls