version: '3'

services:
  # Your existing web server
  web:
    image: nginx:alpine
    ports:
      - "80:80"
    volumes:
      - ./website:/usr/share/nginx/html
      - ./nginx.conf:/etc/nginx/conf.d/default.conf
    restart: always
    networks:
      - web_network

  # Cloudflare tunnel service
  cloudflared:
    image: cloudflare/cloudflared:latest
    command: tunnel --config /etc/cloudflared/config.yml run
    volumes:
      - ./cloudflared-config.yml:/etc/cloudflared/config.yml:ro
      - ~/.cloudflared:/root/.cloudflared:ro  # Mount credentials from host
    restart: always
    depends_on:
      - web
    networks:
      - web_network

networks:
  web_network:
    driver: bridge