triing to run Moley on a Docker

[delfireinoso]

I've created a docker.compose.yml:

services:
  moley:
    image: ghcr.io/stupside/moley:latest
    container_name: moley
    environment:
      MOLEY_CLOUDFLARE__TOKEN: ""
      MOLEY_TUNNEL_INGRESS__ZONE: ""
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__PORT: "3000"
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__HOSTNAME: "localhost"
      MOLEY_TUNNEL_INGRESS__APPS__0__EXPOSE__SUBDOMAIN: "OpenWebUi"
    volumes:
      - type: bind
        source: ./moley.yml
        target: /root/moley.yml
        read_only: true
      - type: bind
        source: ./data/.moley
        target: /root/.moley
        read_only: false
    command: ["--help"]

I run on a terminal on the /moley/ folder where docker.compose.yml

docker compose run --rm moley config set --cloudflare.token="your-api-token"

And it's fine

then I run

docker compose run --rm moley tunnel init

And I get this

Container moley-moley-run-ba04acd193fe Creating 
Container moley-moley-run-ba04acd193fe Created 
2026-05-05 07:39:40 INF tunnel/base.go:41              Initializing new tunnel configuration
2026-05-05 07:39:40 ERR moley/main.go:12               Application failed to execute error="override tunnel config failed: write file failed: open moley.yml: permission denied"

Can I modify something? there is a problem if I try to create it with
touch ./moley.yml I get error

so wich changes have to make? with moley run the moley.yml draft file was created (but I got other errors so I'll want to try docker as it's more stable once you get it running

[stupside]

I've created a docker.compose.yml:

services:
  moley:
    image: ghcr.io/stupside/moley:latest
    container_name: moley
    environment:
      MOLEY_CLOUDFLARE__TOKEN: ""
      MOLEY_TUNNEL_INGRESS__ZONE: ""
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__PORT: "3000"
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__HOSTNAME: "localhost"
      MOLEY_TUNNEL_INGRESS__APPS__0__EXPOSE__SUBDOMAIN: "OpenWebUi"
    volumes:
      - type: bind
        source: ./moley.yml
        target: /root/moley.yml
        read_only: true
      - type: bind
        source: ./data/.moley
        target: /root/.moley
        read_only: false
    command: ["--help"]

I run on a terminal on the /moley/ folder where docker.compose.yml

docker compose run --rm moley config set --cloudflare.token="your-api-token"

And it's fine

then I run

docker compose run --rm moley tunnel init

And I get this

Container moley-moley-run-ba04acd193fe Creating 
Container moley-moley-run-ba04acd193fe Created 
2026-05-05 07:39:40 INF tunnel/base.go:41              Initializing new tunnel configuration
2026-05-05 07:39:40 ERR moley/main.go:12               Application failed to execute error="override tunnel config failed: write file failed: open moley.yml: permission denied"

Can I modify something? there is a problem if I try to create it with touch ./moley.yml I get error

so wich changes have to make? with moley run the moley.yml draft file was created (but I got other errors so I'll want to try docker as it's more stable once you get it running

This is exactly the setup i'm using to test, feel free to give it a try. In your config moley.yaml shouldn't be set to readonly.

services:
  moley:
    image: ghcr.io/stupside/moley:latest
    container_name: moley
    environment:
      MOLEY_CLOUDFLARE__TOKEN: "<your-cloudflare-api-token>"
      MOLEY_TUNNEL_TUNNEL__NAME: "moley-test"
      MOLEY_TUNNEL_INGRESS__ZONE: "xonery.dev"
      MOLEY_TUNNEL_INGRESS__MODE: "subdomain"
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__HOSTNAME: "host.docker.internal"
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__PORT: "3000"
      MOLEY_TUNNEL_INGRESS__APPS__0__TARGET__PROTOCOL: "http"
      MOLEY_TUNNEL_INGRESS__APPS__0__EXPOSE__SUBDOMAIN: "test"
    volumes:
      # Configuration file for moley
      # - ./moley.yml:/root/moley.yml:ro
      # Persisted moley state (API token, lock file, tunnel configs)
      - ./data/.moley:/root/.moley
    command: ["--help"]

Also, ENV values will always override what you put inside your moley.dev

[delfireinoso]

I have updated the compose-docker.yml as your example, I try to get running a service that's exposed by docker on port 3000:3000. I've tried localhost and host.docker.internal

I've deleted any reference on the Cloudflare DNS

Something is missing, as the image is there, but the container it's not initialised and I don't get errors

2026-05-07 08:21:06 INF config/set.go:32               Editing configuration
2026-05-07 08:21:06 INF config/set.go:45               Configuration saved successfully
delfireinososusagna@Mac-mini-de-Delfi Moley % docker compose run --rm moley tunnel init
Container moley-moley-run-743bfde7942e Creating 
Container moley-moley-run-743bfde7942e Created 
2026-05-07 08:21:26 INF tunnel/base.go:41              Initializing new tunnel configuration
2026-05-07 08:21:26 INF tunnel/base.go:59              Tunnel configuration initialized config=moley.yml

But nothing is done on Cloudflare, and I'm sure that the API Token is correct, but if could be this I can try to start new

and even If I run the image, I can view help

delfireinososusagna@Mac-mini-de-Delfi Moley % docker compose up
[+] up 1/1
 ✔ Container moley Created                                                                                          0.0s
Attaching to moley
moley  | NAME:
moley  |    moley - Expose local services through Cloudflare Tunnel
moley  | 
moley  | USAGE:
moley  |    moley [global options] [command [command options]]
moley  | 
moley  | VERSION:
moley  |    2.6.1
moley  | 
moley  | DESCRIPTION:
moley  |    Expose local development services through Cloudflare Tunnel using your own domain names.
moley  | 
moley  | COMMANDS:
moley  |    config   Edit Moley configuration
moley  |    tunnel   Manage Cloudflare tunnels
moley  |    info     Show detailed build information
moley  |    help, h  Shows a list of commands or help for one command
moley  | 
moley  | GLOBAL OPTIONS:
moley  |    --log-level string  Log level (trace, debug, info, warn, error, fatal, panic, disabled) (default: "info")
moley  |    --help, -h          show help
moley  |    --version, -v       print the version
moley exited with code 0

And I don't see where moley.yml is created

I'm running on MacOs, and Docker is on latest build

[delfireinoso]

I have deleted all in cloudlfare and created a new API token with your instructions

Zone > Zone > Read — resolve your zone and account ID
Zone > DNS > Edit — create and delete CNAME records
Account > Cloudflare Tunnel > Edit — create, configure, and delete tunnels
Account > Zero Trust > Edit — only when using access: blocks (Access Applications, Policies, Identity Providers)

I've modified docker-compose.yml with the new API

and command: ["tunnel", "run"]

f I try

docker compose run --rm moley config set --cloudflare.token="token"

The image is created but nothing comes