Additional hosts ??

[GeorgeCastanza]

The problem

I have this set up for HomeAssistant - works well thanks!

Are there any other additional steps after the Additional Hosts config has been done? I can't seem to get it to work? I've tried on the proxmox machine, and also on the router (192.168.1.1). HA is run on proxmox.

external_hostname: m.example.xyz
additional_hosts:
  - hostname: p.example.xyz
    service: http://192.168.1.115:8006
  - hostname: r.example.xyz
    service: http://192.168.1.1
    disableChunkedEncoding: true
log_level: error

What version of Cloudflared has the issue?

5.1.1

What was the last working version of Cloudflared?

No response

What type of installation are you running?

Other

Add-on YAML Configuration

external_hostname: m.example.xyz
additional_hosts:
  - hostname: p.example.xyz
    service: http://192.168.1.115:8006
  - hostname: r.example.xyz
    service: http://192.168.1.1
    disableChunkedEncoding: true
log_level: error

### Anything in the logs that might be useful for us?

```txt
[08:58:08] DEBUG: Cloudflared log level set to "info"
[08:58:08] DEBUG: Checking connectivity to Cloudflare
[08:58:08] DEBUG: Checking region1.v2.argotunnel.com TCP port 7844
[08:58:08] DEBUG: Checking region1.v2.argotunnel.com UDP port 7844
[08:58:09] DEBUG: Checking region2.v2.argotunnel.com TCP port 7844
[08:58:09] DEBUG: Checking region2.v2.argotunnel.com UDP port 7844
[08:58:10] DEBUG: Checking api.cloudflare.com TCP port 443
[08:58:10] INFO: Checking add-on config...
[08:58:10] DEBUG: Checking host {"hostname":"p.example.xyz","service":"http://192.168.1.115:8006"}...
[08:58:10] DEBUG: Checking host {"hostname":"r.example.xyz","service":"http://192.168.1.1","disableChunkedEncoding":true}...
[08:58:10] INFO: Checking for existing certificate...
[08:58:10] INFO: Existing certificate found
[08:58:10] INFO: Checking for existing tunnel...
[08:58:10] INFO: Existing tunnel with ID 87669855-1b2c-4ead-8b40-f7fdcfbfbfea found
[08:58:10] INFO: Checking if existing tunnel matches name given in config
[08:58:11] DEBUG: Existing Cloudflare Tunnel name: homeassistant
[08:58:11] INFO: Existing Cloudflare Tunnel name matches config, proceeding with existing tunnel file
[08:58:11] INFO: Creating config file...
[08:58:11] DEBUG: Checking if SSL is used...
[08:58:11] DEBUG: Requested API resource: http://supervisor/core/info
[08:58:11] DEBUG: Request method: GET
[08:58:11] DEBUG: Request data: {}
[08:58:11] DEBUG: API HTTP Response code: 200
[08:58:11] DEBUG: API Response: {"result": "ok", "data": {"version": "2024.1.5", "version_latest": "2024.1.5", "update_available": false, "machine": "qemux86-64", "ip_address": "172.30.32.1", "arch": "amd64", "image": "ghcr.io/home-assistant/qemux86-64-homeassistant", "boot": true, "port": 8123, "ssl": false, "watchdog": true, "audio_input": null, "audio_output": null, "backups_exclude_database": false}}

[08:58:11] DEBUG: ha_service_protocol: http
[08:58:11] INFO: Validating config file...
[08:58:11] DEBUG: Validating created config file: {"tunnel":"87669855-1b2c-4ead-8b40-f7fdcfbfbfea","credentials-file":"/data/tunnel.json","ingress":[{"hostname":"m.example.xyz","service":"http://homeassistant:8123","originRequest":{"noTLSVerify":true}},{"hostname":"p.example.xyz","service":"http://192.168.1.115:8006","originRequest":{"noTLSVerify":true}},{"hostname":"r.example.xyz","service":"http://192.168.1.1","originRequest":{"disableChunkedEncoding":true,"noTLSVerify":true}},{"service":"http_status:404","originRequest":{"noTLSVerify":true}}]}
Validating rules from /tmp/config.json
OK
[08:58:11] DEBUG: Sucessfully created config file: {"tunnel":"87669855-1b2c-4ead-8b40-f7fdcfbfbfea","credentials-file":"/data/tunnel.json","ingress":[{"hostname":"m.example.xyz","service":"http://homeassistant:8123","originRequest":{"noTLSVerify":true}},{"hostname":"p.example.xyz","service":"http://192.168.1.115:8006","originRequest":{"noTLSVerify":true}},{"hostname":"r.example.xyz","service":"http://192.168.1.1","originRequest":{"disableChunkedEncoding":true,"noTLSVerify":true}},{"service":"http_status:404","originRequest":{"noTLSVerify":true}}]}
[08:58:11] INFO: Creating DNS entry m.example.xyz...
2024-01-29T21:58:11Z INF m.example.xyz is already configured to route to your tunnel tunnelID=87669855-1b2c-4ead-8b40-f7fdcfbfbfea
[08:58:11] INFO: Creating DNS entry p.example.xyz...
2024-01-29T21:58:12Z INF p.example.xyz is already configured to route to your tunnel tunnelID=87669855-1b2c-4ead-8b40-f7fdcfbfbfea
[08:58:12] INFO: Creating DNS entry r.example.xyz...
2024-01-29T21:58:12Z INF r.example.xyz is already configured to route to your tunnel tunnelID=87669855-1b2c-4ead-8b40-f7fdcfbfbfea
[08:58:12] INFO: Finished setting up the Cloudflare Tunnel
[08:58:12] DEBUG: using /tmp/config.json config file
[08:58:12] INFO: Connecting Cloudflare Tunnel...
[08:58:12] DEBUG: cloudflared tunnel --no-autoupdate --metrics=0.0.0.0:36500 --loglevel=info --origincert=/data/cert.pem --config=/tmp/config.json run null

Steps to reproduce the issue

start add on, no luck!

Additional information

HA runs on Proxmox.
Addon works well for HA, not for anything else (on proxmox machine, or even router)

[elcajon]

try to add disableChunkedEncoding for the proxmox host entry.

...
additional_hosts:
  - hostname: p.example.xyz
    service: http://192.168.1.115:8006
    disableChunkedEncoding: true
...

Edit:
and check if the service url http://192.168.1.115:8006 is correct. Default would be https not http

[GeorgeCastanza]

I tried both your suggestions, and neither worked. Any other thoughts?

[elcajon]

Just to be sure, the following configuration does not work for your Proxmox host?

...
additional_hosts:
  - hostname: p.example.xyz
    service: https://192.168.1.115:8006
    disableChunkedEncoding: true
...

I use the same one for mine and it works without any problems. I assume you have installed HA as a VM in Proxmox? Are the hosts accessible from your HA instance? What error messages do you get?

[GeorgeCastanza]

Confirmed that the above does not work for me.

How would I confirm that hosts are accessible from my HA instance?

[elcajon]

For example, you could perform a ping to the hosts from the SSH or code server add-on.

[elcajon]

I will move this issue to the discussions, as it is not a bug.

[eanavalentin]

I just did, but I get the same result with similar configuration.
However, is this supposed to work with remote tunnel setup? I fail to find any info on this and the logs say
All add-on configuration options except tunnel_token will be ignored.

[elcajon]

If you are using a remote managed tunnel, you can add as many hosts as you like directly in the dashboard, all other add-on configuration (besides the token) will be ignored.

[eanavalentin]

Just switched to local managed tunnel (removed token, changed external_hostname) and restarted the addon and now the external_host defined tunnel was generated. No other changes made.

[GeorgeCastanza]

When you say "external_host defined tunnel was generated", do you mean you can access those additional hosts?

My logs say the tunnels are generated, but I cant access anything apart from HA.

[eanavalentin]

Yeah, public hostnames were added and tunnels were accessible.

[GeorgeCastanza]

Are there any further steps. I've created the tunnels, they are visible in the Zero Trust Dashboard, the primary tunnel works (HomeAssistant), but nothing else works. Not even the tunnel to my router. These devices are ping'able from HA.

[GeorgeCastanza]

I know it's closed, but it's still not solved. I can't even access my router, should be pretty simple. Is there anything else that needs to be done (outside of the HA interface to enable this to work).

[aleks-mariusz]

For anyone else finding this from a google search, I got the cloudflared add-on to proxy to my mqtt (mosquitto) add-on externally, using the write-up i posted on this forum page.