From f0090e9ed5f2b115d3f1c68e33d7a4db33022276 Mon Sep 17 00:00:00 2001
From: root <root@docker.sapiaconsulting>
Date: Thu, 15 Oct 2026 15:12:00 +0200
Subject: [PATCH] add cloudflare tunnel

---
 .env.example       |  3 +++
 docker-compose.yml | 13 ++++++++++++-
 2 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/.env.example b/.env.example
index c25a3ef..3f70c79 100644
--- a/.env.example
+++ b/.env.example
@@ -13,3 +13,6 @@ ADMIN_EMAILS=jerry@gmail.com
 
 # Nombre de pronostics à partir duquel les tendances (arrondies) sont affichées
 STATS_MIN_PREDICTIONS=5
+
+# Token du tunnel Cloudflare (dashboard Zero Trust > Tunnels)
+TUNNEL_TOKEN=
diff --git a/docker-compose.yml b/docker-compose.yml
index b8e7841..610a9a5 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -4,9 +4,20 @@ services:
     restart: unless-stopped
     env_file: .env
     ports:
-      - "127.0.0.1:3000:3000"
+      - "3000:3000"
     volumes:
       - naissance-data:/data
 
+  cloudflared:
+    image: cloudflare/cloudflared:latest
+    restart: unless-stopped
+    command: tunnel --no-autoupdate run
+    environment:
+      TUNNEL_TOKEN: ${TUNNEL_TOKEN}
+    # Réseau de l'hôte : "localhost:3000" (origine du tunnel) atteint le port publié ci-dessus
+    network_mode: host
+    depends_on:
+      - naissance
+
 volumes:
   naissance-data: