Update Cloudflared configuration and documentation

Co-Authored-By: Oz <oz-agent@warp.dev>
This commit is contained in:
Raghav
2026-04-19 05:50:24 +05:30
parent c37af441a9
commit f262c01534
3 changed files with 22 additions and 3 deletions

View File

@ -8,6 +8,13 @@ This repository documents the VPN setup hosted on this machine.
- Client access using `cloudflared access tcp` + OpenVPN
## Quick client connect
0. Ensure `vpn.bhatfamily.in` is routed to this tunnel:
```bash
cloudflared tunnel route dns --overwrite-dns 6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0 vpn.bhatfamily.in
dig +short vpn.bhatfamily.in CNAME
```
Expected CNAME target:
- `6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0.cfargotunnel.com.`
1. Ensure `cloudflared` and `openvpn` are installed on the client machine.
2. Use the provided client profile (`rbhat-client-cloudflared.ovpn`).
3. Update the profile remote to local forwarder:
@ -26,6 +33,7 @@ This repository documents the VPN setup hosted on this machine.
## Important
- `21194` is a **local client-side** port, not a public internet port on `vpn.bhatfamily.in`.
- If `cloudflared access tcp` fails with `address already in use`, choose another free local port and match it in the `.ovpn` `remote` line.
- If `dig +short vpn.bhatfamily.in CNAME` does not return `6a2e99c2-ce2c-49a9-a3f2-8bf1ad3073b0.cfargotunnel.com.`, rerun the DNS route command above.
## Full operational runbook
See `docs/operations.md` for: