caddy-cloudflare ghcr.io/rroller/caddy-cloudflare:2 https://github.com/rroller/caddy-cloudflare/pkgs/container/caddy-cloudflare bridge sh false https://github.com/rroller/caddy-cloudflare/issues https://github.com/rroller/caddy-cloudflare Caddy reverse proxy with the Cloudflare DNS module, built automatically from official Caddy images. Uses ghcr.io/rroller/caddy-cloudflare:2 for normal Unraid image updates. Before starting, create /mnt/user/appdata/caddy-cloudflare/Caddyfile as a regular file and add your Caddy configuration. For Cloudflare DNS challenges, set the masked CLOUDFLARE_API_TOKEN field and reference {env.CLOUDFLARE_API_TOKEN} in the Caddyfile. Use a token restricted to the required DNS zone with Zone Read and DNS Edit permissions. Keep the /data and /config paths persistent. No custom Caddy executable mount is needed. There is no administration web UI; visit the hostnames configured in your Caddyfile. Bridge mode defaults to host ports 8080 and 8443 to avoid Unraid management ports. If using standard external ports, forward TCP 80 to the configured HTTP host port and TCP 443 to the configured HTTPS host port; HTTP/3 additionally uses UDP 443. Alternatively assign a dedicated container IP and use ports 80 and 443. Adjust ports for your network; port mappings do not open router firewall rules. Caddy reverse proxy with the Cloudflare DNS module, built automatically from official Caddy images. Uses ghcr.io/rroller/caddy-cloudflare:2 for normal Unraid image updates. Before starting, create /mnt/user/appdata/caddy-cloudflare/Caddyfile as a regular file and add your Caddy configuration. For Cloudflare DNS challenges, set the masked CLOUDFLARE_API_TOKEN field and reference {env.CLOUDFLARE_API_TOKEN} in the Caddyfile. Use a token restricted to the required DNS zone with Zone Read and DNS Edit permissions. Keep the /data and /config paths persistent. No custom Caddy executable mount is needed. There is no administration web UI; visit the hostnames configured in your Caddyfile. Bridge mode defaults to host ports 8080 and 8443 to avoid Unraid management ports. If using standard external ports, forward TCP 80 to the configured HTTP host port and TCP 443 to the configured HTTPS host port; HTTP/3 additionally uses UDP 443. Alternatively assign a dedicated container IP and use ports 80 and 443. Adjust ports for your network; port mappings do not open router firewall rules. Network:Proxy https://raw.githubusercontent.com/rroller/unraid-templates/master/ronnieroller.com/caddy-cloudflare.xml https://raw.githubusercontent.com/docker-library/docs/master/caddy/logo.png --log-opt max-size=10m --log-opt max-file=3 8080 8443 8443 /mnt/user/appdata/caddy-cloudflare/Caddyfile /mnt/user/appdata/caddy-cloudflare/data /mnt/user/appdata/caddy-cloudflare/config