diff --git a/docker-compose-multitenant.yml b/docker-compose-multitenant.yml
index 5bc402d..9578549 100644
--- a/docker-compose-multitenant.yml
+++ b/docker-compose-multitenant.yml
@@ -15,8 +15,9 @@ services:
     restart: unless-stopped
     profiles:
       - cloudflare
-    command: ["tunnel", "--no-autoupdate", "run", "--credentials-file", "/etc/cloudflared/credentials.json", "homeserver"]
+    command: ["--config", "/etc/cloudflared/config.yml", "tunnel", "run"]
     volumes:
+      - ./docker/cloudflared/config.yml:/etc/cloudflared/config.yml:ro
       - /etc/cloudflared/credentials.json:/etc/cloudflared/credentials.json:ro
     depends_on:
       nginx:
diff --git a/docker-compose.yml b/docker-compose.yml
index 3ec8b4f..e5bcfb3 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,8 +5,9 @@ services:
     restart: unless-stopped
     profiles:
       - cloudflare
-    command: ["tunnel", "--no-autoupdate", "run", "--credentials-file", "/etc/cloudflared/credentials.json", "homeserver"]
+    command: ["--config", "/etc/cloudflared/config.yml", "tunnel", "run"]
     volumes:
+      - ./docker/cloudflared/config.yml:/etc/cloudflared/config.yml:ro
       - /etc/cloudflared/credentials.json:/etc/cloudflared/credentials.json:ro
     depends_on:
       nginx:
diff --git a/docker/cloudflared/config.yml b/docker/cloudflared/config.yml
new file mode 100644
index 0000000..426b7be
--- /dev/null
+++ b/docker/cloudflared/config.yml
@@ -0,0 +1,8 @@
+tunnel: homeserver
+credentials-file: /etc/cloudflared/credentials.json
+
+ingress:
+  - service: https://nginx:443
+    originRequest:
+      noTLSVerify: true
+  - service: http_status:404
\ No newline at end of file