nixos-selfhost/tunnel.nix

{...}:
{
  services.nginx.enable = true;
 services.cloudflared = {
  enable = true;
  tunnels = {
    "tulpan" = {
      credentialsFile = "/etc/nixos/.secrets/tulpan-tunnel.json";
      default = "http_status:404";
      ingress = {
        "*.sondell.org" = "http://localhost:80";
      };
    };
  };
}; 
}