Hi!
Ich habe bereits mehrere Threads hier im Forum dazu gelesen und trotzdem komme ich einfach nicht weiter. Ich möchte gerne HA (und später nextcloud) über einen Cloudflare Tunnel betrieben. Der Tunnel zwischen HA und cloudflare ist aktiv und funktioniert.
Log cloudflared:
[21:27:36] INFO: Using Cloudflare Remote Management Tunnel
[21:27:36] INFO: All add-on configuration options except tunnel_token will be ignored.
[21:27:36] INFO: Connecting Cloudflare Tunnel...
[21:27:36] INFO: Running nginx...
2025-07-03T19:27:37Z INF Starting tunnel tunnelID=819za4db-d441-407a-97f2-1d42d1159da3
2025-07-03T19:27:37Z INF Version 2025.6.1 (Checksum 87a38f8b0cf371b926224a1346443096a8b9f38138561e0b3144efa4c9fc1f51f7)
2025-07-03T19:27:37Z INF GOOS: linux, GOVersion: go1.24.2, GoArch: arm64
2025-07-03T19:27:37Z INF Settings: map[metrics:0.0.0.0:36500 no-autoupdate:true token:*****]
2025-07-03T19:27:37Z INF Generated Connector ID: 79185607-81ab-4c5d-9239-e22b6f82842f
2025-07-03T19:27:37Z INF Initial protocol quic
2025-07-03T19:27:37Z INF ICMP proxy will use 172.30.33.3 as source for IPv4
2025-07-03T19:27:37Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
2025-07-03T19:27:37Z INF ICMP proxy will use 172.30.33.3 as source for IPv4
2025-07-03T19:27:37Z INF ICMP proxy will use ::1 in zone lo as source for IPv6
2025-07-03T19:27:37Z INF Starting metrics server on [::]:36500/metrics
2025-07-03T19:27:37Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(25497) CurveP256] connIndex=0 event=0 ip=198.41.200.233
2025-07-03T19:27:37Z INF Registered tunnel connection connIndex=0 connection=0d53766e-b4ec-4605-8e80-3057346ff6ee event=0 ip=198.41.200.233 location=fra18 protocol=quic
2025-07-03T19:27:37Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(25497) CurveP256] connIndex=1 event=0 ip=198.41.192.107
2025-07-03T19:27:37Z INF Updated to new configuration config="{\"ingress\":[{\"hostname\":\"ha.xxxxxx.de\",\"originRequest\":{},\"service\":\"http://172.30.32.1:8123\"},{\"service\":\"http_status:404\"}],\"warp-routing\":{\"enabled\":false}}" version=6
2025-07-03T19:27:38Z INF Registered tunnel connection connIndex=1 connection=2835a874-4131-40cb-a78c-d281c3d77b12 event=0 ip=198.41.192.107 location=fra08 protocol=quic
2025-07-03T19:27:38Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(25497) CurveP256] connIndex=2 event=0 ip=198.41.200.193
2025-07-03T19:27:39Z INF Registered tunnel connection connIndex=2 connection=9ad90f44-f4a6-493b-80a9-6f20e7932cd7 event=0 ip=198.41.200.193 location=fra12 protocol=quic
2025-07-03T19:27:39Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(25497) CurveP256] connIndex=3 event=0 ip=198.41.192.57
2025-07-03T19:27:40Z INF Registered tunnel connection connIndex=3 connection=2c2037ce-60ac-4ba6-9ca9-d8deb43544cb event=0 ip=198.41.192.57 location=fra11 protocol=quic
2025-07-03T19:27:39Z INF Tunnel connection curve preferences: [X25519MLKEM768 CurveID(25497) CurveP256] connIndex=3 event=0 ip=198.41.192.57
2025-07-03T19:27:40Z INF Registered tunnel connection connIndex=3 connection=2c2037ce-60ac-4ba6-9ca9-d8deb43544cb event=0 ip=198.41.192.57 location=fra11 protocol=quic
configuration.yaml:
# Loads default set of integrations. Do not remove.
default_config:
http:
cors_allowed_origins:
- https://google.com
- https://www.home-assistant.io
ip_ban_enabled: true
login_attempts_threshold: 5
use_x_forwarded_for: true
trusted_proxies:
- 172.30.33.0/24
- 172.30.33.0/24
- 172.30.32.0/24
Der Status im Zero Trust Dashboard beim Tunnel ist: Fehlerfrei.
Wenn ich die URL im Handy über Mobile Daten abfrage, öffnet kurz im Browser (egal welcher, auch Privatmodus) der linke Balken zu ca. einem Achtel und danach passiert nichts mehr. Ich bin mit meinem Latein am Ende.
Sollten aus meinen Logs sicherheitsrelevante Daten hervorgehen, lasst es mich bitte wissen und ich streiche es. Danke!
