init commit to create the project

.gitignore

@@ -0,0 +1,2 @@
+.env
+*.env.local

.python-version

@@ -0,0 +1 @@
+3.12

docker-compose.yml

@@ -0,0 +1,30 @@
+# Cloudflared tunnel — outbound-only edge for the homelab.
+#
+# Routes mcp.herbylab.dev / auth.herbylab.dev / trellis.herbylab.dev (and
+# anything Travis adds in the Cloudflare dashboard) to in-network services
+# on the shared `homelab` Docker network. Ingress rules live in the
+# Cloudflare dashboard, NOT in this repo — token-mode auth.
+#
+# Usage:
+#   docker compose -f docker-compose.yml up -d
+#
+# Env: reads .env (TUNNEL_TOKEN). .env is gitignored.
+
+name: cloudflared
+
+services:
+  cloudflared:
+    image: cloudflare/cloudflared:latest
+    container_name: cloudflared-mcp
+    restart: unless-stopped
+    command: tunnel run
+    env_file:
+      - .env
+    environment:
+      TUNNEL_TOKEN: ${TUNNEL_TOKEN}
+    networks:
+      - homelab
+
+networks:
+  homelab:
+    external: true

main.py

@@ -0,0 +1,6 @@
+def main():
+    print("Hello from cloudflared!")
+
+
+if __name__ == "__main__":
+    main()

pyproject.toml

@@ -0,0 +1,7 @@
+[project]
+name = "cloudflared"
+version = "0.1.0"
+description = "Add your description here"
+readme = "README.md"
+requires-python = ">=3.12"
+dependencies = []

uv.lock

@@ -0,0 +1,8 @@
+version = 1
+revision = 3
+requires-python = ">=3.12"
+
+[[package]]
+name = "cloudflared"
+version = "0.1.0"
+source = { virtual = "." }