From b295a6e4cc777e1ef32187a0e59a707f06d44800 Mon Sep 17 00:00:00 2001
From: James Turland <james@turland.uk>
Date: Wed, 26 Mar 2025 13:06:47 +0000
Subject: [PATCH] cloudflare-https

---
 .../cloudflared/docker-compose.yaml           | 14 ++++++++++
 Cloudflare-HTTPS/nginx/docker-compose.yaml    | 26 +++++++++++++++++++
 2 files changed, 40 insertions(+)
 create mode 100644 Cloudflare-HTTPS/cloudflared/docker-compose.yaml
 create mode 100644 Cloudflare-HTTPS/nginx/docker-compose.yaml

diff --git a/Cloudflare-HTTPS/cloudflared/docker-compose.yaml b/Cloudflare-HTTPS/cloudflared/docker-compose.yaml
new file mode 100644
index 0000000..84c05cb
--- /dev/null
+++ b/Cloudflare-HTTPS/cloudflared/docker-compose.yaml
@@ -0,0 +1,14 @@
+services:
+  tunnel:
+    container_name: cloudflared-tunnel
+    image: cloudflare/cloudflared
+    restart: unless-stopped
+    command: tunnel run
+    networks:
+      - proxy
+    environment:
+      - TUNNEL_TOKEN=${CLOUDFLARE_TUNNEL_TOKEN}
+
+networks:
+  proxy:
+    external: true
\ No newline at end of file
diff --git a/Cloudflare-HTTPS/nginx/docker-compose.yaml b/Cloudflare-HTTPS/nginx/docker-compose.yaml
new file mode 100644
index 0000000..f5b1a50
--- /dev/null
+++ b/Cloudflare-HTTPS/nginx/docker-compose.yaml
@@ -0,0 +1,26 @@
+services:
+  nginx:
+    image: lscr.io/linuxserver/nginx:latest
+    container_name: nginx
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Etc/UTC
+    networks:
+      - proxy
+    labels:
+      - "traefik.enable=true"
+      - "traefik.docker.network=proxy"
+      - "traefik.http.routers.nginx.entrypoints=http"
+      - "traefik.http.routers.nginx.rule=Host(`nginx.jimsgarage-demos.co.uk`)"
+      - "traefik.http.middlewares.nginx-https-redirect.redirectscheme.scheme=https"
+      - "traefik.http.routers.nginx.middlewares=nginx-https-redirect"
+      - "traefik.http.routers.nginx-secure.entrypoints=https"
+      - "traefik.http.routers.nginx-secure.rule=Host(`nginx.jimsgarage-demos.co.uk`)"
+      - "traefik.http.routers.nginx-secure.tls=true"
+      - "traefik.http.routers.nginx-secure.tls.certresolver=cloudflare"
+      - "traefik.http.routers.nginx-secure.service=nginx"
+      - "traefik.http.services.nginx.loadbalancer.server.port=80"
+networks:
+  proxy:
+    external: true
\ No newline at end of file