daocn/tunnel repository overview

High-performance, multi-architecture Docker image combining **Sing-box (v1.13+)** and **Cloudflare Argo Tunnel (cloudflared)** for secure, zero-inbound-port, anti-censorship reverse

## ✨ Features
- **Zero Open Ports**: No public inbound ports required on the host firewall. Completely hidden from external port scanners.
- **Dual Multi-Arch Support**: Native builds for both `linux/amd64` (x86_64) and `linux/arm64` (ARM64/AArch64).
- **Hardened Process Guard**: Built-in heartbeat daemon ensuring instant auto-healing and seamless container recovery.
- **Anycast & CDN Optimized**: Fully compatible with Cloudflare Anycast edge routing, clean IPs, and standard TLS ports (443, 2053, 8443, etc.).
- **No Uncontrolled Updates**: Configured with `--no-autoupdate` to guarantee 100% stable, uninterrupted long-term runtime.

## 🚀 Quick Start (Docker Compose)

```yaml
services:
  tunnel:
    image: daocn/tunnel:latest
    container_name: tunnel-node
    restart: always
    environment:
      - token=YOUR_CLOUDFLARE_TUNNEL_TOKEN
      - domain=YOUR_TUNNEL_DOMAIN
      - uuid=YOUR_FIXED_UUID # Optional: locks UUID permanently