RoccoHoward

Running multiple Cloudflare Tunnel services

This is a simple guide to setting up multiple cloudflared services (via systemctl). Useful if you have to run tunnels authenticated by different accounts and want to let each account handle their tunneling configurations via the Dashboard/UI.

1. (optional, so its easy to clone the service definition file) Setup your first tunnel using the standard sudo cloudflared service install <token> command
2. cd into the folder containing the cloudflared.service definition (usually /etc/systemd/system or /usr/lib/systemd/system
3. Duplicate the existing cloudflared.service into another file with a unique name e.g. sudo cp cloudflared.service cloudflared-b.service
4. Open up your new service cloudflared-b.service in your favorite text editor
5. Change the token within the ExecStart= line to match your second tunnel
6. Change the service Description= to match your service filename

RoccoHoward

<div id="loading-screen" class="hidden w-full h-full fixed block top-0 left-0 bg-white opacity-75 z-50">
  <span class="text-green-500 opacity-75 top-1/2 my-0 mx-auto block relative w-0 h-0">
    <i class="fas fa-circle-notch fa-spin fa-5x"></i>
  </span>
</div>

RoccoHoward

; supervisor config file

[unix_http_server]
file=/var/run/supervisor.sock   ; (the path to the socket file)
chmod=0700                       ; sockef file mode (default 0700)

[supervisord]
logfile=/var/log/supervisor/supervisord.log ; (main log file;default $CWD/supervisord.log)
pidfile=/var/run/supervisord.pid ; (supervisord pidfile;default supervisord.pid)
childlogdir=/var/log/supervisor            ; ('AUTO' child log dir, default $TEMP)

RoccoHoward

[Unit] 
Description=Supervisor daemon 
Documentation=http://supervisord.org 
After=network.target

[Service] 
ExecStart=/usr/local/bin/supervisord -n -c /etc/supervisor/supervisord.conf 
ExecStop=/usr/local/bin/supervisorctl $OPTIONS shutdown 
ExecReload=/usr/local/bin/supervisorctl $OPTIONS reload 
KillMode=process 

RoccoHoward

curl -sS https://dl.yarnpkg.com/debian/pubkey.gpg | sudo apt-key add -
echo "deb https://dl.yarnpkg.com/debian/ stable main" | sudo tee /etc/apt/sources.list.d/yarn.list

RoccoHoward

##
# PHP-FPM
##
upstream php {
  server unix:/run/php/php7.3-fpm.sock;
}

RoccoHoward

[Unit]
Description=The CloudWatch Logs agent
After=rc-local.service

[Service]
Type=simple
Restart=always
KillMode=process
TimeoutSec=infinity
PIDFile=/var/awslogs/state/awslogs.pid

RoccoHoward

[/var/log/mail.log]
datetime_format = %b %d %H:%M:%S
file = /var/log/mail.log
buffer_duration = 5000
log_stream_name = {hostname}
initial_position = start_of_file
log_group_name = /var/log/mail.log
[/var/log/auth.log]
datetime_format = %b %d %H:%M:%S
file = /var/log/auth.log

RoccoHoward

##
# PHP-FPM
##
upstream php {
  server 127.0.0.1:7777;
}

RoccoHoward

--ignore-ack-defaults
# This is the default ackrc for ack version 2.14.

# There are four different ways to match
#
# is:  Match the filename exactly
#
# ext: Match the extension of the filename exactly
#
# match: Match the filename against a Perl regular expression