Connect a Custom Domain

// start.js — starts your app and, if a token is set, a Cloudflare tunnel.
require("dotenv").config();

const fs = require("fs");
const path = require("path");
const { spawn, spawnSync } = require("child_process");

const CLOUDFLARED_URL =
  "https://github.com/cloudflare/cloudflared/releases/latest/download/cloudflared-linux-amd64";
const binaryPath = path.join(__dirname, "cloudflared");
const children = [];

// The container has no apt — download the binary on first run, reuse it after.
function ensureCloudflared() {
  if (fs.existsSync(binaryPath)) return binaryPath;
  console.log("[tunnel] downloading cloudflared...");
  const dl = spawnSync("curl", ["-fsSL", "-o", binaryPath, CLOUDFLARED_URL], {
    stdio: "inherit",
  });
  if (dl.status !== 0) return null;
  fs.chmodSync(binaryPath, 0o755);
  return binaryPath;
}

// Spawn a child process; if any child exits, stop the rest and quit.
function start(name, command, args) {
  const child = spawn(command, args, { stdio: "inherit", env: process.env });
  child.on("exit", (code) => {
    console.error(`[${name}] exited (${code}); shutting down`);
    for (const c of children) if (!c.killed) c.kill("SIGTERM");
    process.exit(code ?? 1);
  });
  children.push(child);
}

const token = process.env.CLOUDFLARE_TUNNEL_TOKEN?.trim();
if (token) {
  const binary = ensureCloudflared();
  if (binary) start("tunnel", binary, ["tunnel", "run", "--token", token]);
} else {
  console.log("[tunnel] CLOUDFLARE_TUNNEL_TOKEN not set; skipping tunnel");
}

// Start your app — change this to your real entry point.
start("app", "node", ["index.js"]);