Cloudflare Mesh
Cloudflare Mesh
Get Started with Apps!
Get Started with Apps!
App Version:
2026.7.0
(Changelog)
Keywords: network, cloudflare, mesh
Train: Community
Home Page: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/
Keywords: network, cloudflare, mesh
Train: Community
Home Page: https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/
Cloudflare Mesh Details
Added: 2026-09-28
Last Updated: 2026-09-28
Added: 2026-09-28
Last Updated: 2026-09-28
Cloudflare Mesh connects your private networks to Cloudflare using the Cloudflare One Client.
Run as Context- Container [cloudflare-mesh] runs as root user and group.
Group: 0 / Host group is [root]
User: 0 / Host user is [root]
×
![Full Screenshot]()
Host Mounts
- /dev/net/tun : Network device
Security Capabilities
- Cloudflare Mesh is able to perform network administration tasks
- Cloudflare Mesh is able to use raw and packet sockets
- Cloudflare Mesh is able to change group ID of processes
- Cloudflare Mesh is able to transfer capabilities between processes
- Cloudflare Mesh is able to change user ID of processes
App Metadata (Raw File)
{
"1.0.0": {
"healthy": true,
"supported": true,
"healthy_error": null,
"location": "/__w/apps/apps/trains/community/cloudflare-mesh/1.0.0",
"last_update": "2026-09-28 17:41:46",
"required_features": [],
"human_version": "2026.7.0_1.0.0",
"version": "1.0.0",
"app_metadata": {
"app_version": "2026.7.0",
"capabilities": [
{
"description": "Cloudflare Mesh is able to perform network administration tasks",
"name": "NET_ADMIN"
},
{
"description": "Cloudflare Mesh is able to use raw and packet sockets",
"name": "NET_RAW"
},
{
"description": "Cloudflare Mesh is able to change group ID of processes",
"name": "SETGID"
},
{
"description": "Cloudflare Mesh is able to transfer capabilities between processes",
"name": "SETPCAP"
},
{
"description": "Cloudflare Mesh is able to change user ID of processes",
"name": "SETUID"
}
],
"categories": [
"networking"
],
"changelog_url": "https://developers.cloudflare.com/changelog/product/mesh/",
"date_added": "2026-09-28",
"description": "Cloudflare Mesh connects your private networks to Cloudflare using the Cloudflare One Client.",
"home": "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/",
"host_mounts": [
{
"description": "Network device",
"host_path": "/dev/net/tun"
}
],
"icon": "https://media.sys.truenas.net/apps/cloudflare-mesh/icons/icon.svg",
"keywords": [
"network",
"cloudflare",
"mesh"
],
"lib_version": "2.3.14",
"lib_version_hash": "6038f48d2190e05399cd824410204c3eba22568c1150470f3d9f8815a6dd241a",
"maintainers": [
{
"email": "dev@truenas.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "cloudflare-mesh",
"run_as_context": [
{
"description": "Container [cloudflare-mesh] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
}
],
"screenshots": [],
"sources": [
"https://apps.truenas.com/catalog/cloudflare-mesh_community/",
"https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/",
"https://hub.docker.com/r/cloudflare/mesh"
],
"title": "Cloudflare Mesh",
"train": "community",
"version": "1.0.0"
},
"schema": {
"groups": [
{
"name": "Cloudflare Mesh Configuration",
"description": "Configure Cloudflare Mesh"
},
{
"name": "User and Group Configuration",
"description": "Configure User and Group for Cloudflare Mesh"
},
{
"name": "Network Configuration",
"description": "Configure Network for Cloudflare Mesh"
},
{
"name": "Storage Configuration",
"description": "Configure Storage for Cloudflare Mesh"
},
{
"name": "Labels Configuration",
"description": "Configure Labels for Cloudflare Mesh"
},
{
"name": "Resources Configuration",
"description": "Configure Resources for Cloudflare Mesh"
}
],
"questions": [
{
"variable": "cloudflare_mesh",
"label": "",
"group": "Cloudflare Mesh Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "mesh_token",
"label": "Mesh Token",
"description": "The Token to use for Cloudflare Mesh.",
"schema": {
"type": "string",
"required": true,
"private": true
}
},
{
"variable": "additional_envs",
"label": "Additional Environment Variables",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "env",
"label": "Environment Variable",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Name",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string"
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "network",
"label": "",
"group": "Network Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "networks",
"label": "Networks",
"description": "The docker networks to join",
"schema": {
"type": "list",
"show_if": [
[
"host_network",
"=",
false
]
],
"default": [],
"items": [
{
"variable": "network",
"label": "Network",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Name",
"description": "The name of the network to join.</br>\nThe network must already exist.\n",
"schema": {
"type": "string",
"default": "",
"required": true
}
},
{
"variable": "containers",
"label": "Containers",
"description": "The containers to add to this network.",
"schema": {
"type": "list",
"items": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "name",
"label": "Container Name",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "cloudflare-mesh",
"description": "cloudflare-mesh"
}
]
}
},
{
"variable": "config",
"label": "Container Network Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "aliases",
"label": "Aliases (Optional)",
"description": "The network aliases to use for this container on this network.",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "alias",
"label": "Alias",
"schema": {
"type": "string"
}
}
]
}
},
{
"variable": "interface_name",
"label": "Interface Name (Optional)",
"description": "The network interface name to use for this network",
"schema": {
"type": "string"
}
},
{
"variable": "mac_address",
"label": "MAC Address (Optional)",
"description": "The MAC address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "ipv4_address",
"label": "IPv4 Address (Optional)",
"description": "The IPv4 address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "ipv6_address",
"label": "IPv6 Address (Optional)",
"description": "The IPv6 address to use for this network interface.",
"schema": {
"type": "string"
}
},
{
"variable": "gw_priority",
"label": "Gateway Priority (Optional)",
"description": "Indicates the priority of the gateway for this network interface.",
"schema": {
"type": "int",
"null": true
}
},
{
"variable": "priority",
"label": "Priority (Optional)",
"description": "Indicates in which order Compose connects the service\u2019s containers to its networks.",
"schema": {
"type": "int",
"null": true
}
}
]
}
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "host_network",
"label": "Host Network",
"description": "Bind to the host network. It's recommended to keep this disabled.\n",
"schema": {
"type": "boolean",
"default": false
}
}
]
}
},
{
"variable": "storage",
"label": "",
"group": "Storage Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "config",
"label": "Cloudflare Mesh Config Storage",
"description": "The path to store Cloudflare Mesh Config.",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"hidden": true,
"default": "config"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": []
}
}
]
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
}
]
}
},
{
"variable": "additional_storage",
"label": "Additional Storage",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "storageEntry",
"label": "Storage Entry",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "type",
"label": "Type",
"description": "ixVolume: Is dataset created automatically by the system.</br>\nHost Path: Is a path that already exists on the system.</br>\nSMB Share: Is a SMB share that is mounted to as a volume.</br>\nNFS Share: Is a NFS share that is mounted to as a volume.\n",
"schema": {
"type": "string",
"required": true,
"default": "ix_volume",
"enum": [
{
"value": "host_path",
"description": "Host Path (Path that already exists on the system)"
},
{
"value": "ix_volume",
"description": "ixVolume (Dataset created automatically by the system)"
},
{
"value": "cifs",
"description": "SMB/CIFS Share (Mounts a volume to a SMB share)"
},
{
"value": "nfs",
"description": "NFS Share (Mounts a volume to a NFS share)"
}
]
}
},
{
"variable": "read_only",
"label": "Read Only",
"description": "Mount the volume as read only.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "mount_path",
"label": "Mount Path",
"description": "The path inside the container to mount the storage.",
"schema": {
"type": "path",
"required": true
}
},
{
"variable": "host_path_config",
"label": "Host Path Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"host_path"
]
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "acl",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
},
{
"variable": "path",
"label": "Host Path",
"description": "The host path to use for storage.",
"schema": {
"type": "hostpath",
"show_if": [
[
"acl_enable",
"=",
false
]
],
"required": true
}
}
]
}
},
{
"variable": "ix_volume_config",
"label": "ixVolume Configuration",
"description": "The configuration for the ixVolume dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"ix_volume"
]
],
"$ref": [
"normalize/ix_volume"
],
"attrs": [
{
"variable": "acl_enable",
"label": "Enable ACL",
"description": "Enable ACL for the storage.",
"schema": {
"type": "boolean",
"default": false
}
},
{
"variable": "dataset_name",
"label": "Dataset Name",
"description": "The name of the dataset to use for storage.",
"schema": {
"type": "string",
"required": true,
"default": "storage_entry"
}
},
{
"variable": "acl_entries",
"label": "ACL Configuration",
"schema": {
"type": "dict",
"show_if": [
[
"acl_enable",
"=",
true
]
],
"attrs": [],
"$ref": [
"normalize/acl"
]
}
}
]
}
},
{
"variable": "cifs_config",
"label": "SMB Configuration",
"description": "The configuration for the SMB dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"cifs"
]
],
"attrs": [
{
"variable": "server",
"label": "Server",
"description": "The server to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "path",
"label": "Path",
"description": "The path to mount the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "username",
"label": "Username",
"description": "The username to use for the SMB share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "password",
"label": "Password",
"description": "The password to use for the SMB share.",
"schema": {
"type": "string",
"required": true,
"private": true
}
},
{
"variable": "domain",
"label": "Domain",
"description": "The domain to use for the SMB share.",
"schema": {
"type": "string"
}
}
]
}
},
{
"variable": "nfs_config",
"label": "NFS Configuration",
"description": "The configuration for the NFS dataset.",
"schema": {
"type": "dict",
"show_if": [
[
"type",
"=",
"nfs"
]
],
"attrs": [
{
"variable": "server",
"label": "Server",
"description": "The server to mount the NFS share.",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "path",
"label": "Path",
"description": "The path to mount the NFS share.",
"schema": {
"type": "string",
"required": true
}
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "labels",
"label": "",
"group": "Labels Configuration",
"schema": {
"type": "list",
"default": [],
"items": [
{
"variable": "label",
"label": "Label",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "key",
"label": "Key",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "value",
"label": "Value",
"schema": {
"type": "string",
"required": true
}
},
{
"variable": "containers",
"label": "Containers",
"description": "Containers where the label should be applied",
"schema": {
"type": "list",
"items": [
{
"variable": "container",
"label": "Container",
"schema": {
"type": "string",
"required": true,
"enum": [
{
"value": "cloudflare-mesh",
"description": "cloudflare-mesh"
}
]
}
}
]
}
}
]
}
}
]
}
},
{
"variable": "resources",
"label": "",
"group": "Resources Configuration",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "limits",
"label": "Limits",
"schema": {
"type": "dict",
"attrs": [
{
"variable": "cpus",
"label": "CPUs",
"description": "CPUs limit for Cloudflare Mesh.",
"schema": {
"type": "int",
"default": 2,
"required": true
}
},
{
"variable": "memory",
"label": "Memory (in MB)",
"description": "Memory limit for Cloudflare Mesh.",
"schema": {
"type": "int",
"default": 4096,
"required": true
}
}
]
}
}
]
}
}
]
},
"readme": "<h1>Cloudflare Mesh</h1> <p><a href=\"https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/\">Cloudflare Mesh</a> connects your private networks to Cloudflare using the Cloudflare One Client.</p>",
"changelog": null,
"chart_metadata": {
"app_version": "2026.7.0",
"capabilities": [
{
"description": "Cloudflare Mesh is able to perform network administration tasks",
"name": "NET_ADMIN"
},
{
"description": "Cloudflare Mesh is able to use raw and packet sockets",
"name": "NET_RAW"
},
{
"description": "Cloudflare Mesh is able to change group ID of processes",
"name": "SETGID"
},
{
"description": "Cloudflare Mesh is able to transfer capabilities between processes",
"name": "SETPCAP"
},
{
"description": "Cloudflare Mesh is able to change user ID of processes",
"name": "SETUID"
}
],
"categories": [
"networking"
],
"changelog_url": "https://developers.cloudflare.com/changelog/product/mesh/",
"date_added": "2026-09-28",
"description": "Cloudflare Mesh connects your private networks to Cloudflare using the Cloudflare One Client.",
"home": "https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/",
"host_mounts": [
{
"description": "Network device",
"host_path": "/dev/net/tun"
}
],
"icon": "https://media.sys.truenas.net/apps/cloudflare-mesh/icons/icon.svg",
"keywords": [
"network",
"cloudflare",
"mesh"
],
"lib_version": "2.3.14",
"lib_version_hash": "6038f48d2190e05399cd824410204c3eba22568c1150470f3d9f8815a6dd241a",
"maintainers": [
{
"email": "dev@truenas.com",
"name": "truenas",
"url": "https://www.truenas.com/"
}
],
"name": "cloudflare-mesh",
"run_as_context": [
{
"description": "Container [cloudflare-mesh] runs as root user and group.",
"gid": 0,
"group_name": "Host group is [root]",
"uid": 0,
"user_name": "Host user is [root]"
}
],
"screenshots": [],
"sources": [
"https://apps.truenas.com/catalog/cloudflare-mesh_community/",
"https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-mesh/",
"https://hub.docker.com/r/cloudflare/mesh"
],
"title": "Cloudflare Mesh",
"train": "community",
"version": "1.0.0"
}
}
}Support, maintenance, and documentation for applications within the Community catalog is handled by the TrueNAS community. The TrueNAS Applications Market hosts but does not validate or maintain any linked resources associated with this app.
There currently aren’t any resources available for this application!
Please help the TrueNAS community add resources here or discuss this application in the TrueNAS Community forum.