traefik-cloudflare-companion
This builds a Docker image to automatically update and create Cloudflare DNS records upon container start.
Platform availability
Available on 1 of 9 platforms
- Unraid
- TrueNAS (not listed)
- Umbrel (not listed)
- ZimaOS (not listed)
- Proxmox (not listed)
- Helm (not listed)
- Mac (not listed)
- Windows (not listed)
- Linux (not listed)
Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.
34/100 Low
- Maintained
- 20last commit 533 days ago
- Popular
- 55555 GitHub stars
- Easy to install
- 351 install platform, install notes, Docker image
- Light to run
- No data
Based on 3 of 4 factors.
Availability: platform listings confirmed today, links checked 15 days ago
- GitHub stars
- 555
- Open issues
- 47
- Last commit
- 2025-04-30
- Latest release
- 7.4.0
- License
- MIT
- Activity
- stale
Checked 8 days ago - source: GitHub (tiredofit/docker-traefik-cloudflare-companion)
Resources & Compatibility
Requirements not published yet.
Checked 17 days ago - source: Docker Hub image tags and published docs
First-install notes
- Tell Traefik which ports and apps to use In your startup settings, set the web ports (for example :80 and :443) and turn on the provider, which is the setting that tells Traefik where to look for apps, such as Docker. If these are missing, Traefik won’t receive normal web traffic or see the apps you want to serve. source
- Check your config file path before starting If you are using a configuration file, start Traefik with the correct file path and make sure that file exists and can be read. If the path is wrong or the file is unreadable, Traefik won’t load your startup settings. source
- File provider needs a readable folder If you use the file provider, which lets you add routes from separate config files, point its directory to a real folder that Traefik can read. If the folder is missing or unreadable, those route files won’t load and some apps or domains may not work. source
Fetched 16 days ago - each note links to its source
Variants
Alternatives (10)
- BunkerWeb - BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
- Caddy - Caddy is an extensible web server and reverse proxy that serves Transport Layer Security (TLS) by default, making it simple to secure and r…
- Envoy Gateway - Envoy Gateway is an open-source project that manages Envoy Proxy as a standalone or Kubernetes-based application gateway.
- Fossorial Pangolin - Open-source identity-based remote access platform using WireGuard, offering unified management, tunneled connections, granular access contr…
- Haproxy - HAProxy is a TCP proxy and a HTTP reverse proxy.
- Nginx Proxy Manager - Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
- nginx - Nginx is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy, and mail proxy server.
- npmplus - NPMplus is an improved fork of Nginx Proxy Manager that provides a web interface for managing reverse proxy rules, SSL certificates, and ap…
- traefik - Traefik is a modern HTTP reverse proxy and load balancer that integrates with Docker, Kubernetes, and other container orchestrators to conf…
- tsdproxy - TSDProxy is a Tailscale proxy for Docker containers that automatically creates Tailscale machines for labeled containers, providing automat…
Checked 3 days ago - source: AlternativeTo
Common questions
Which discovery modes does the companion support, and which one is on by default?
It supports Docker, Docker Swarm, and Traefik Polling. Docker discovery is the only mode enabled by default.
How does Docker discovery know which running containers to update in Cloudflare?
It searches running Docker containers for supported labels. An example label shown is a Traefik single-host rule like traefik.normal.frontend.rule=Host:example1.dom.
What DNS entries does it create after it discovers matching hosts?
It adds or updates CNAME records in Cloudflare that point to the configured TARGET_DOMAIN.
Can one deployment update more than one Cloudflare zone?
Yes, you can set multiple zones that you want it to update.
Which Traefik startup settings are commonly needed for the labeled services to receive traffic?
Set Traefik's web ports, for example 80 and 443, and turn on the provider that tells Traefik where to look for apps, such as Docker. If these are missing, Traefik will not receive normal web traffic or see the apps.
Answers sourced from github.com, github.com
Community
- Ultimate Traefik Docker Compose Guide [2022] : r/selfhosted - Reddit (reddit)
- How to use Cloudflare Tunnel and Traefik : r/selfhosted - Reddit (reddit)
- Recommended Setup for Traefik using Cloudflare Tunnels (reddit)
- Traefik + cloudflare ssl - SSL / TLS - Cloudflare Community (other)
- Traefik - Cloudflare working guide? : r/Traefik - Reddit (reddit)
Collected 16 days ago - public community threads