chore: update cloudflared (#1823)

* chore: update cloudflared

* Update helmrelease.yaml.j2

Author: onedr0p

templates/config/kubernetes/apps/network/external/cloudflared/configs/config.yaml.j2

@@ -4,7 +4,7 @@ originRequest:
 
 ingress:
   - hostname: "${SECRET_DOMAIN}"
-    service: https://external-ingress-nginx-controller.network.svc.cluster.local:443
+    service: &svc https://external-ingress-nginx-controller.network.svc.cluster.local:443
   - hostname: "*.${SECRET_DOMAIN}"
-    service: https://external-ingress-nginx-controller.network.svc.cluster.local:443
+    service: *svc
   - service: http_status:404

templates/config/kubernetes/apps/network/external/cloudflared/helmrelease.yaml.j2

@@ -29,18 +29,15 @@ spec:
               tag: 2025.2.1
             env:
               NO_AUTOUPDATE: true
-              TUNNEL_CRED_FILE: /etc/cloudflared/creds/credentials.json
+              TUNNEL_CRED_FILE: /etc/cloudflared/credentials.json
               TUNNEL_METRICS: 0.0.0.0:8080
               TUNNEL_ORIGIN_ENABLE_HTTP2: true
-              TUNNEL_TRANSPORT_PROTOCOL: quic
               TUNNEL_POST_QUANTUM: true
-              TUNNEL_ID: "#{ cloudflare_tunnel('TunnelID') }#"
+              TUNNEL_TRANSPORT_PROTOCOL: quic
             args:
               - tunnel
-              - --config
-              - /etc/cloudflared/config/config.yaml
               - run
-              - "$(TUNNEL_ID)"
+              - #{ cloudflare_tunnel('TunnelID') }#
             probes:
               liveness: &probes
                 enabled: true
@@ -89,13 +86,13 @@ spec:
         type: configMap
         name: cloudflared-configmap
         globalMounts:
-          - path: /etc/cloudflared/config/config.yaml
+          - path: /etc/cloudflared/config.yaml
             subPath: config.yaml
             readOnly: true
       creds:
         type: secret
         name: cloudflared-secret
         globalMounts:
-          - path: /etc/cloudflared/creds/credentials.json
+          - path: /etc/cloudflared/credentials.json
             subPath: credentials.json
             readOnly: true