services:
  tunnel:
    container_name: cloudflared-tunnel
    image: cloudflare/cloudflared
    security_opt:
      - apparmor:unconfined
    restart: unless-stopped
    command: tunnel run
    environment:
      - TUNNEL_TOKEN=${TUNNEL_TOKEN}