# Traefik Cloudflare Companion

Traefik Cloudflare Companion is a Docker image for self-hosters that automatically discovers Traefik-fronted containers and creates or updates Cloudflare CNAME records for their configured hostnames. It is open source and self-hosted, installable on Unraid.

Canonical page: https://ourlocalhost.com/app/491/traefik-cloudflare-companion

## Description

Traefik Cloudflare Companion is a Docker image for self-hosters that automatically discovers Traefik-fronted containers and creates or updates Cloudflare CNAME records for their configured hostnames.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

33/100 (Low), based on 3 of 4 factors.
- Maintained: 19 (last commit 540 days ago)
- Popular: 55 (555 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)

## Links

- GitHub: https://github.com/tiredofit/docker-traefik-cloudflare-companion
- Unraid: https://ca.unraid.net/apps/traefik-cloudflare-companion-0uq26qy1i1gfym?q=traefik-cloudflare-companion

## Common questions

### Which discovery modes does the companion support, and which one is on by default?

It supports Docker, Docker Swarm, and Traefik Polling. Docker discovery is the only mode enabled by default.

### How does Docker discovery know which running containers to update in Cloudflare?

It searches running Docker containers for supported labels. An example label shown is a Traefik single-host rule like traefik.normal.frontend.rule=Host:example1.dom.

### What DNS entries does it create after it discovers matching hosts?

It adds or updates CNAME records in Cloudflare that point to the configured TARGET_DOMAIN.

### Can one deployment update more than one Cloudflare zone?

Yes, you can set multiple zones that you want it to update.

### Which Traefik startup settings are commonly needed for the labeled services to receive traffic?

Set Traefik's web ports, for example 80 and 443, and turn on the provider that tells Traefik where to look for apps, such as Docker. If these are missing, Traefik will not receive normal web traffic or see the apps.

## Alternatives

- BunkerWeb: BunkerWeb is a self-hosted, open-source web application firewall and NGINX-based web server that protects services with secure-by-default s…
- Caddy: Caddy is an extensible web server and reverse proxy that serves Transport Layer Security (TLS) by default, making it simple to secure and r…
- Envoy Gateway: Envoy Gateway is an open-source project that manages Envoy Proxy as a standalone or Kubernetes-based application gateway.
- Fossorial Pangolin: Open-source identity-based remote access platform using WireGuard, offering unified management, tunneled connections, granular access contr…
- Haproxy: HAProxy is a TCP proxy and a HTTP reverse proxy.
- Nginx Proxy Manager: Nginx Proxy Manager is a self-hosted reverse proxy and web server that lets you expose home or small-office applications to the internet wi…
- nginx: Nginx is an HTTP web server, reverse proxy, content cache, load balancer, TCP/UDP proxy, and mail proxy server.
- npmplus: NPMplus is an improved fork of Nginx Proxy Manager that provides a web interface for managing reverse proxy rules, SSL certificates, and ap…
- traefik: Traefik is a modern HTTP reverse proxy and load balancer that integrates with Docker, Kubernetes, and other container orchestrators to conf…
- tsdproxy: TSDProxy is a Tailscale proxy for Docker containers that automatically creates Tailscale machines for labeled containers, providing automat…

---
Source: Our Local Host (https://ourlocalhost.com/app/491/traefik-cloudflare-companion), the self-hosted and open-source app directory.