DEPRECATED: This guide is no longer relevant for folk.zone. The nitro server uses direct HTTPS via Let's Encrypt instead of Cloudflare tunnels.

Status: Resolved
Affects: Cloudflare Tunnel

The only correct way to add a new subdomain route to a Named Tunnel is through the Cloudflare Zero Trust dashboard.

1. Zero Trust → Networks → Tunnels → cafe
2. Public Hostnames → Add a public hostname
3. Fill in:
   • Subdomain: service
   • Domain: folk.zone
   • Service: http://caddy:80
4. Save

Cloudflare automatically creates the DNS CNAME record. No manual DNS entry needed.

Delete the existing DNS record first (DNS tab → delete the CNAME), then add the public hostname through Zero Trust. Cloudflare will recreate the DNS record correctly.

1. Cloudflare pushes the new ingress rule to the remote tunnel config
2. The running cloudflared container pulls the update automatically (no restart needed)
3. Route becomes active within seconds

• Homelab Troubleshooting Index

• Named Tunnels Use Remote Configuration
• DNS Records vs. Tunnel Routes Are Different Things
• Adding a New Service
• Return to wiki home