I use cloudflared to provide a secure tunnel to my home resources. I struggled to find any instructions for running cloudflared on OPNSense so here is a quick how-to:

SSH to your OPNSense router and run:

  1. opnsense-code ports tools
  2. cd /usr/ports/net/cloudflared
  3. make install
  4. Create a tunnel and grab your token string from the docker example given
  5. nano /usr/local/etc/rc.d/cloudflared modify so that it matches below. We're just removing ${cloudflared_conf} from the command arguments as we're supplying a token instead of using a config.yaml
#!/bin/sh

name="cloudflared"
rcvar="cloudflared_enable"
logfile="/var/log/cloudflared.log"
pidfile="/var/run/cloudflared.pid"
procname="/usr/local/bin/cloudflared"

load_rc_config $name

: ${cloudflared_enable:="NO"}
: ${cloudflared_conf:="/usr/local/etc/cloudflared/config.yml"}
: ${cloudflared_mode:="tunnel"}

command="/usr/sbin/daemon"
command_args="-o ${logfile} -p ${pidfile} -f ${procname} ${cloudflared_mode}"

run_rc_command "$1"
  1. nano /etc/rc.conf and add:
cloudflared_enable="YES"```
cloudflared_mode="tunnel --post-quantum --no-autoupdate run --token your_token_here"

That's it! 'cloudflared' will now start at boot. To start the tunnel immediately:

/usr/sbin/daemon -o /var/log/cloudflared.log -p /var/run/cloudflared.pid -f /usr/local/bin/cloudflared tunnel --post-quantum --no-autoupdate run --token your_token_here