expose service via cloudflare tunnel and zero trust access

general
1

systemd unit for starting cloudflare tunnel at startup

[Unit]
Description=Opens cloudflare tunnel to my postgresql server running remotely
Wants=network-online.target
After=network-online.target

[Service]
ExecStart=cloudflared access tcp --hostname sub.domain.tld --url 127.0.0.1:5432
User=user

[Install]
WantedBy=multi-user.target

systemctl enable postgresql-cloudflared
systemctl start postgresql-cloudflared
systemctl status postgresql-cloudflared

● postgresql-cloudflared.service - Opens cloudflare tunnel to my postgresql server running remotely
     Loaded: loaded (/usr/lib/systemd/system/postgresql-cloudflared.service; enabled; preset: disabled)
     Active: active (running) since Thu 2025-05-15 23:22:16 CEST; 4min 57s ago
 Invocation: a879771b94e54441bbdde0b1f55912f5
   Main PID: 21581 (cloudflared)
      Tasks: 13 (limit: 18266)
     Memory: 26.7M (peak: 28.5M)
        CPU: 171ms
     CGroup: /system.slice/postgresql-cloudflared.service
             └─21581 cloudflared access tcp --hostname sub.domain.tld --url 127.0.0.1:5432

May 15 23:22:16 g14 systemd[1]: Started Opens cloudflare tunnel to my postgresql server running remotely
May 15 23:22:16 g14 cloudflared[21581]: 2025-05-15T21:22:16Z INF Start Websocket listener host=127.0.0.1:5432