> ## Content Index
> Fetch the complete content index at: https://home.miawy.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Expose NAS Services with Cloudflare Tunnel (Docker)
- URL: https://home.miawy.com/expose-nas-services-with-cloudflare-tunnel-docker/
- Published: 2026-10-17T13:36:51.000Z
- Updated: 2026-10-17T13:36:51.000Z
- Author: Mia Chan
- Tags: NAS

A Cloudflare Tunnel lets you publish self-hosted services (`home.miawy.com`, `git.miawy.com`, etc.) without opening router ports or exposing your home IP. Here are the main steps.

## Prerequisites

- A domain managed by Cloudflare DNS (here: `miawy.com`)
- A NAS with Docker / Docker Compose (Synology Container Manager works)
- Services already running on your NAS (e.g. Gitea on port 3000, a dashboard on port 8080)

## Create the tunnel

1. Open the Cloudflare dashboard, search **Tunnel**
2. Click **Create a tunnel** → choose **Cloudflared** → name it (e.g. `nas`).
3. Copy the **tunnel token** shown in the Docker install command. You only need the token string.

## Run Cloudflared in Docker

1. Open **Container Manager** → **Image** → search cloudflare/cloudflared
2. Go to **Container** → **Create**
3. In the command, input the one copied from Cloudflare (tunnel --no-autoupdate run --token {token})
4. Network select **host**
5. Then start the container

## Add subdomain

1. Go to tunnel config, add route
2. Service URL, if cloudflared is running in the NAS, then can use http://localhost:{service-port} or https://localhost:{service-port}

## Set DNS

1. Cloudflare dashboard search **DNS**
2. Use **CNAME**
3. Turn on **Yellow Cloud**
4. **Target** should be a long xxxxxxxx.cfargotunnel.com