From beeb9edde3548cacf237dfb5b1ef4368c228de61 Mon Sep 17 00:00:00 2001
From: josedario87 <jodarioel87@gmail.com>
Date: Sun, 5 Oct 2025 03:12:14 -0600
Subject: [PATCH] Fix: Connect tunnel to Traefik via HTTPS to prevent redirect
 loops

- Cambiado service de http://traefik:80 a https://traefik:443
- noTLSVerify: true para aceptar certificados self-signed de Traefik
- Esto previene ERR_TOO_MANY_REDIRECTS
---
 config.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/config.yml b/config.yml
index bc4834d..0e0d94f 100644
--- a/config.yml
+++ b/config.yml
@@ -8,17 +8,17 @@ credentials-file: /etc/cloudflared/credentials.json
 ingress:
   # Wildcard - todo *.nucleoriofrio.com pasa por Traefik
   - hostname: "*.nucleoriofrio.com"
-    service: http://traefik:80
+    service: https://traefik:443
     originRequest:
-      noTLSVerify: false
+      noTLSVerify: true
       # Preserve el Host header para que Traefik pueda enrutar correctamente
       httpHostHeader: ""
 
   # Dominio raíz (opcional)
   - hostname: nucleoriofrio.com
-    service: http://traefik:80
+    service: https://traefik:443
     originRequest:
-      noTLSVerify: false
+      noTLSVerify: true
       httpHostHeader: ""
 
   # Catch-all - rechaza todo lo demás