---

name: cloudflare-tunnels description: Use when the user asks to manage Cloudflare tunnels, start/stop tunnels, configure tunnel routing, check tunnel status, or expose local services via Cloudflare. Covers cloudflared CLI operations for tunnel management on curatest.xyz domain.

Cloudflare Tunnel Management

Account Details

• Domain: curatest.xyz
• Cloudflared path: C:\Program Files (x86)\cloudflared\cloudflared.exe
• Config directory: C:\Users\User\.cloudflared\
• Auth certificate: C:\Users\User\.cloudflared\cert.pem

Existing Tunnels

Authentication Setup (New Machine)

If cert.pem doesn't exist, authenticate first:

Copy"C:\Program Files (x86)\cloudflared\cloudflared.exe" login

This opens a browser to authenticate with Cloudflare and saves the certificate.

Creating a New Tunnel

Step 1: Create the tunnel

Copy"C:\Program Files (x86)\cloudflared\cloudflared.exe" tunnel create <tunnel-name>

This creates a credentials JSON file in the config directory.

Step 2: Create config file

Create C:\Users\User\.cloudflared\config-<name>.yml:

Copytunnel: <tunnel-uuid-from-step-1>
credentials-file: C:\Users\User\.cloudflared\<tunnel-uuid>.json

ingress:
  - hostname: <subdomain>.curatest.xyz
    service: http://127.0.0.1:<PORT>
  - service: http_status:404

Note: Use 127.0.0.1 not localhost on Windows (see Troubleshooting section).

Step 3: Add DNS route

Copy"C:/Program Files (x86)/cloudflared/cloudflared.exe" tunnel route dns <tunnel-name> <subdomain>.curatest.xyz

Step 4: Start the tunnel

Copy"C:/Program Files (x86)/cloudflared/cloudflared.exe" tunnel --config "C:/Users/User/.cloudflared/config-<name>.yml" run <tunnel-name>

Common Commands

List all tunnels

Copy"C:\Program Files (x86)\cloudflared\cloudflared.exe" tunnel list

Get tunnel info

Copy"C:\Program Files (x86)\cloudflared\cloudflared.exe" tunnel info <tunnel-name>

Delete a tunnel

Copy"C:\Program Files (x86)\cloudflared\cloudflared.exe" tunnel delete <tunnel-name>

Stop all tunnels

Copytaskkill /F /IM cloudflared.exe

Starting Existing Synaptum6 Tunnels

Start frontend tunnel (port 3000)

Copy"C:/Program Files (x86)/cloudflared/cloudflared.exe" tunnel --config "C:/Users/User/.cloudflared/config-synaptum6.yml" run synaptum6

Start API tunnel (port 8890)

Copy"C:/Program Files (x86)/cloudflared/cloudflared.exe" tunnel --config "C:/Users/User/.cloudflared/config-synaptum6-api.yml" run synaptum6-api

Start both (run each in background)

Use run_in_background: true in Claude Code for each command.

Verifying Tunnel Status

Check if services are running locally

Copycurl -s http://localhost:3000  # Frontend
curl -s http://localhost:8890/api/v1/health  # API

Check DNS resolution

Copynslookup <subdomain>.curatest.xyz 8.8.8.8

Test tunnel endpoint

Copycurl -s https://<subdomain>.curatest.xyz

Flush local DNS cache (after adding new DNS routes)

Copyipconfig //flushdns

Troubleshooting

SSL/TLS handshake errors

New DNS routes take 1-5 minutes for Cloudflare to provision SSL certificates. Test with HTTP first:

Copycurl -s http://<subdomain>.curatest.xyz

Tunnel not connecting

1. Verify local service is running on the configured port
2. Check config file has correct port
3. Ensure tunnel credentials JSON file exists
4. Check tunnel logs for errors

Finding running tunnel processes

Copytasklist | findstr cloudflared

Check listening ports

Copynetstat -ano | grep ":<port>"

Config File Template

IMPORTANT: On Windows, use 127.0.0.1 instead of localhost to avoid IPv6 resolution issues.

Copytunnel: <uuid>
credentials-file: C:\Users\User\.cloudflared\<uuid>.json

ingress:
  - hostname: <app>.curatest.xyz
    service: http://127.0.0.1:<PORT>
  - service: http_status:404

Why 127.0.0.1?

On Windows, localhost resolves to IPv6 ::1 first. If the origin service only listens on IPv4, cloudflared will get "connection refused" and return 502 Bad Gateway. Using 127.0.0.1 explicitly forces IPv4.

Naming Conventions

• Tunnel name: <appname> for frontend, <appname>-api for backend
• Config file: config-<appname>.yml
• Hostname: <appname>.curatest.xyz or api.<appname>.curatest.xyz