Backup and restore Cloudflare Tunnels, without the spreadsheet
Tikka Masala is a small self-hosted FastAPI app that verifies a Cloudflare API token, lists your tunnels, and lets you snapshot and restore tunnel configurations on your own schedule.
What it does
Everything you need to keep Cloudflare Tunnel configurations safe, without touching the Cloudflare dashboard for routine work.
Verify & browse
Verify a Cloudflare API token, list every tunnel visible to the account, and jump straight to Access Applications and Policies for each one.
JSON backups
Create and download JSON snapshots of a tunnel configuration, with metadata like timestamp, account, tunnel name, and notes kept in SQLite.
Restore anywhere
Restore a snapshot to the original tunnel or to a different one, with a full restore history so you know what changed and when.
Scheduled backups
Run automatic backups for all tunnels or a chosen subset, with per-tunnel frequency (every run, weekly, monthly) and retention cleanup.
Notifications
Get notified over a generic webhook and/or Telegram, with fully customizable messages and per-event placeholders.
Demo mode
Try the UI without persisting auth data, scheduler state, or notifications; good for a quick look before rolling it out.
Quick start
Docker Compose is the fastest way to run Tikka Masala. Full setup, environment variables, and configuration in the documentation.
cp .env.sample .env
docker compose up -d --buildThen open http://localhost:8080.
