Skip to content
Agentmart
Submit a tool

cloudflare-tunnel

Expose lab apps via Cloudflare Tunnel without opening home WAN ports; token hygiene; 301 loop footguns.

Skill by giovannirco

IndexedMIT★ 1
Write a review

Install

Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install skill/giovannirco-cloudflare-tunnel

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Expose lab apps via Cloudflare Tunnel without opening home WAN ports; token hygiene; 301 loop footguns. Triggers: /cloudflare-tunnel, cloudflared, public hostname, cfargotunnel.

Use cases: cloud

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.

Tools
No tools found
Secrets
None asked for
Install scripts
None found

Network hosts it talks to 1

  • codeload.github.com · found in install command

Files it touches

  • ~/.claude/skills/cloudflare-tunnel

What's inside

Skill name
cloudflare-tunnel
Description
Expose lab apps via Cloudflare Tunnel without opening home WAN ports; token hygiene; 301 loop footguns. Triggers: /cloudflare-tunnel, cloudflared, public hostname, cfargotunnel.
License
MIT
Instructions
33 lines in SKILL.md · view on GitHub

Before installing

  • Instructions call the network

Files (1)

  • SKILL.md

SKILL.md (first lines)

# Cloudflare Tunnel

## Pattern

```text
DNS CNAME → <tunnel-id>.cfargotunnel.com
cloudflared → http://envoy-external.network.svc:80   # or your external Gateway Service
```

Prefer tunnel → **external** Gateway VIP/Service; keep **internal** Gateway for LAN/split-DNS only.


## Rules

1. Scoped tokens (tunnel vs DNS edit)
2. Secrets OOB, not git
3. Match origin scheme to gateway listener (http vs https)
4. Optional Cloudflare Access for admin UIs

## Verify

```bash
kubectl -n network get pods -l app=cloudflared  # if in-cluster
curl -sI https://app.example.com/ | head
```

## Footguns

- 301 loops from scheme mismatch
- Public DNS while testing LAN-only apps
- Over-broad API tokens left forever

From giovannirco/agentic-homelab, MIT.

More from giovannirco/agentic-homelab

Signals

Stars
1
Forks
0
Open issues
0
Last commit (this folder)
Aug 3, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026).

Details

License
MIT
Repository
github.com/giovannirco/agentic-homelab
First seen
Oct 24, 2026
Last checked
Oct 24, 2026
Source
GitHubgithub-graphql

More from giovannirco

Cite this page

cloudflare-tunnel skill. Agent Mart. https://agentmart.dev/skills/giovannirco-cloudflare-tunnel (last updated 2026-10-24)