概述

Cloudflare Tunnel client with built-in Docker healthcheck.

Identical to the official cloudflare/cloudflared image — the only addition is a HEALTHCHECK instruction using the built-in cloudflared tunnel ready command. No files changed, no packages added, no ports opened.

Why this exists: The official image uses a distroless base with no shell (/bin/sh). Docker's --health-cmd always runs through /bin/sh, so healthchecks added via Extra Parameters will always fail. This image bakes the healthcheck in using exec-form, which bypasses the shell.

Setup:

Go to Cloudflare Zero Trust dashboard (dash.teams.cloudflare.com)
Navigate to Networks > Tunnels > Create a tunnel
Select Cloudflared as connector, give it a name
Choose Docker as the environment — Cloudflare shows you a token
Copy the token and paste it in Post Arguments below, replacing YOUR_TUNNEL_TOKEN_HERE
The TUNNEL_METRICS variable is already set — this is required for the healthcheck
Start the container — it should show as healthy within 30 seconds