[Unit]
Description=Cloudflare Tunnel for r630-03 Proxmox Host
After=network.target

[Service]
Type=simple
User=root
ExecStart=/usr/local/bin/cloudflared tunnel --config /etc/cloudflared/tunnel-r630-03.yml run
Restart=on-failure
RestartSec=5s
StandardOutput=journal
StandardError=journal
SyslogIdentifier=cloudflared-r630-03

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/etc/cloudflared

# Resource limits
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target