tekmodedk/cloudflared repository overview

⁠tekmodedk/cloudflared

A lightweight, standalone Cloudflared⁠ DNS-over-HTTPS (DoH) proxy built on Alpine Linux, designed for seamless integration with Pi-hole, AdGuardHome, or other custom DNS setups.

⁠🚀 Purpose

This Docker image enables secure and private DNS resolution by proxying DNS queries over HTTPS to Cloudflare's servers. Ideal for use cases like:

• Encrypting DNS queries to prevent ISP snooping
• Integrating with Pi-hole or AdGuardHome as an upstream DNS server
• Running a self-contained DoH proxy with minimal system overhead

⁠🛠 Features

• 🐳 Lightweight Alpine-based image (~15MB)
• 🔐 Latest Cloudflared binary per architecture (via multi-arch build)
• 📁 Configurable via /etc/cloudflared/config.yml
• 🔌 Listens on 5053/udp and 5053/tcp

⁠📦 Docker Usage

docker run -d \
  --name cloudflared-doh \
  -p 5053:5053/udp -p 5053:5053/tcp \
  tekmodedk/cloudflared

⁠📄 Example config.yml

proxy-dns: true
proxy-dns-port: 5053
proxy-dns-upstream:
  - https://1.1.1.1/dns-query
  - https://1.0.0.1/dns-query
  - https://[2606:4700:4700::1111]/dns-query
  - https://[2606:4700:4700::1001]/dns-query
proxy-dns-address: 0.0.0.0
no-autoupdate: true

Save it as config.yml and mount it into the container if needed.

⁠📡 Pi-hole Integration

To use Cloudflared as Pi-hole's upstream DNS:

1. Run the container as shown above
2. In Pi-hole Admin → Settings → DNS, set:

Custom DNS: 127.0.0.1#5053

⁠🔧 Build Arguments

• TARGETARCH — architecture provided during multi-arch build

⁠📚 Source

GitHub: happycuban/cloudflared-armv7⁠