Cloudflare Tunnel Setup for Hedge Backend

Named Tunnel (Custom Domain - SSL Pending)

• Tunnel Name: hedge
• Tunnel ID: 8a905012-161b-47e5-b986-70402214707a
• Config: /home/henryk/.cloudflared/config.yml
• Target domain: api.widerwings.com
• SSL Status: Pending validation (Google Trust Services)

Quick Tunnel (Working Now)

• URL: https://inquiries-designated-separately-highways.trycloudflare.com
• Started via: nohup cloudflared tunnel --url http://localhost:8000 &
• Logs: /tmp/cloudflared.log

Systemd Services

sudo systemctl status hedge-api      # FastAPI on :8000
sudo systemctl status cloudflared    # Named tunnel

Cloudflare Account

• Email: widerwingsinc@gmail.com
• Account ID: 4b8c68ea514887164e51a5d73627e26e
• Zone ID (widerwings.com): a4c456ea0409d6444693ad6674942a7e

Frontend DNS Fix

For Vercel domains, Cloudflare CNAME must be "DNS only" (grey cloud), NOT "Proxied" (orange cloud). Cloudflare proxy breaks Vercel SSL.