My defaultCloudflareSafe public exposure

Cloudflare Tunnel (cloudflared)

Expose a service on a private box through a custom domain, without opening a port.

How I expose services on my own VPS.

Use it when

Publishing a service from a VPS or private network, optionally behind Cloudflare Access login.

Provisioning

Official Pulumi package · Official Terraform provider

Where it fits

Private access and exposing a box: Pick 02.
A private service onto a public domain, no open ports.

Last reviewed 18 October 2026 by Nicolas Dao

Also in Networking and hosting

Default Hostinger VPS: Cheap always-on server
Default Route 53 and Cloudflare DNS: DNS
Default Tailscale: Private network access

Back to the map →

Want this stack in your AWS account?

Cloudless Labs is a Sydney consultancy. We migrate on-premises systems to AWS, build serverless apps on this stack, and coach teams to ship with Claude Code and Codex.