cloudflared

Cloudflare Tunnel client: connects a service to Cloudflare's network without opening an inbound port.

Detected by cloudflared | macOS, Linux, Windows |developers.cloudflare.com

Sync it cloudflared.toml

Sync rules

What travels, what stays, what never leaves

cloudflared in your home directory Every rule on this page, by file

tunnel: 6ff42ae2-765d-4adf-8112-31c55c1551ef

credentials-file: /Users/octocat/.cloudflared/6ff42ae2-765d-4adf-8112-31c55c1551ef.jsonmachine-local

loglevel: info

ingress:

…

Each machine keeps its own copy of these.

· cert.pem Never synced

· *.json Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/cloudflared. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out. None of them splits credentials-file for you — that part is Otty’s own sync, or a template you write by hand.