diff --git a/modules/server/copyparty.nix b/modules/server/copyparty.nix
index 909ff32..37ca27f 100644
--- a/modules/server/copyparty.nix
+++ b/modules/server/copyparty.nix
@@ -1,7 +1,7 @@
 { inputs, ... }:
 
 {
-  flake.modules.nixos.server = { pkgs, config, ... }: {
+  flake.modules.nixos.server = { pkgs, lib, config, ... }: {
     imports = [
       inputs.copyparty.nixosModules.default
     ];
@@ -12,6 +12,19 @@
     sops.secrets."copyparty/passwords/ron" = {
       owner = config.services.copyparty.user;
     };
+    sops.secrets."cloudflare/copyparty" = {};
+    
+    services.cloudflared.tunnels = lib.mkIf config.services.cloudflared.enable {
+      "files" = {
+        credentialsFile = "/run/secrets/cloudflare/copyparty";
+        default = "http_status:404";
+        ingress = {
+          "files.teesh.dev" = {
+            service = "http://localhost:3293";
+          };
+        };
+      };
+    };
 
     nixpkgs.overlays = [ inputs.copyparty.overlays.default ];
     environment.systemPackages = [ pkgs.copyparty ];
diff --git a/secrets.yaml b/secrets.yaml
index deed017..50e8a69 100644
--- a/secrets.yaml
+++ b/secrets.yaml
@@ -4,6 +4,8 @@ copyparty:
     passwords:
         ilay: ENC[AES256_GCM,data:BIh+FIdvKg8=,iv:q+aCn2f2/Y2TbQc5pR2buEO0DSAj7Bq3Zvyjv1cf30Y=,tag:zaSse7VCTdEd6jo5JEiZsA==,type:str]
         ron: ENC[AES256_GCM,data:8sw3Sf158A==,iv:9EyFYAxoFMGYijQ93lDOjSoaP/RHMtphlhto14ofXq0=,tag:T2MvVxUXnlx+yZyH0znZsA==,type:str]
+cloudflare:
+    copyparty: ENC[AES256_GCM,data:SK8qhyjIiOsKzZsnh8W8/BRJmbHoLA6rCGGUzKb9ucbTiiCUhfnaR7A/0SSKKecrMwTmuCos0WnEUe0ixGWJcHncEoLpMyAQMfmL81wbyfDhkxrEjc77aSRomAqM9X/jWg3ocp4oxKKUkEfnnKUqkv4vse+J/lBZjlOoTtwiPoJ1V/GL2JKru/f/LoERQqCEaAqMnQeXJyi/5pf4wPCKLbRQxZ1LCmxeyMMRU0FgOQ==,iv:HqAmQR1SMd4D3uf0eSCfKBCO61mM/Zdfiv/RBlaiJkc=,tag:7ESjgrqkG9RWDAmV/2wGdA==,type:str]
 sops:
     age:
         - recipient: age1fdrtfvf3ywarc4sq7jjc5d6elas3fr73cfenkkyyj0ck6z9x2d0qlpn92h
@@ -33,7 +35,7 @@ sops:
             MFp0UW1HSW9MbmppcHlNM25CaFhqOWcKppF0dE4YNh+mN1tyZju4zxM6ZFBSKx9U
             cGYtUemtt4s9ko3hPt8ZM/ysKOeZgnYoeG7QQnwSoF3F+/gurvb0Bg==
             -----END AGE ENCRYPTED FILE-----
-    lastmodified: "2026-02-03T13:36:57Z"
-    mac: ENC[AES256_GCM,data:rPZBNDUSdkiIP8/ltYUCr7QpqEjPjPDyHc38o6I8xUHF+fMaagKdJbwJpHWCw8Ao2WMFbmf4sntiBkilSJUQsR57zoHNmqJAcxCsnnl8IR7vvvRwiQSrMD4sNR0wfRnta1wUCYeXrX8l/z4Gt1aWE/P4MCJ/f1Cx4L5kAuQcF1Y=,iv:O5VhiqSFmENu4I9OHQWuCnAyAyHHbh3iCgPzXIlsbnY=,tag:O2F8TM4dzPWCLs35mMUYhQ==,type:str]
+    lastmodified: "2026-02-04T21:04:09Z"
+    mac: ENC[AES256_GCM,data:vn6ihNZnWEmUY7IW59YDHZNHVClmmxmo5Pb0efIamYMhESIUB0Q0EUQJKS4uGi0V9e38ZQtrUO/U4NHmk6gOOIF9xoRr2OgIQH9qt3UmWhUo3Vi60cUT0zwR4nyuDbaihV29prFh9twrcz4sdj8V73k93x2ALlC65I1dyOpFlqQ=,iv:eUpfZgVt+1jfA5m412gcPBeydb8aj2eGyss7OvIPIjY=,tag:P01vYyz+WkNBgfuNje9BEA==,type:str]
     unencrypted_suffix: _unencrypted
     version: 3.11.0