Fix tunnel: conditional temp HOME + force http2 protocol

- Only use temp HOME when ~/.cloudflared/config.yml exists (named tunnel
  config with catch-all 404 overrides quick tunnels)
- Always use --protocol http2 (QUIC/UDP blocked on many networks)
- Applied to both main tunnel and per-port tunnels

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: davindicode

server/tunnel.ts

@@ -1,6 +1,7 @@
 import { spawn, type ChildProcess } from "child_process";
-import { existsSync } from "fs";
+import { existsSync, mkdtempSync } from "fs";
 import { join } from "path";
+import { tmpdir } from "os";
 
 // Main OTG Code tunnel
 let mainTunnelProcess: ChildProcess | null = null;
@@ -16,6 +17,23 @@ export function setOnPortTunnelDied(cb: (port: number) => void): void {
   onPortTunnelDied = cb;
 }
 
+// Check if ~/.cloudflared/config.yml exists (named tunnel config that would override quick tunnels)
+function hasNamedTunnelConfig(): boolean {
+  const home = process.env.HOME || process.env.USERPROFILE || "";
+  if (!home) return false;
+  return existsSync(join(home, ".cloudflared", "config.yml")) ||
+         existsSync(join(home, ".cloudflared", "config.yaml"));
+}
+
+// Build spawn options — use temp HOME to bypass named tunnel config if present
+function tunnelSpawnOptions(): { env?: Record<string, string> } {
+  if (hasNamedTunnelConfig()) {
+    const cfHome = mkdtempSync(join(tmpdir(), "cloudflared-"));
+    return { env: { ...process.env, HOME: cfHome } as Record<string, string> };
+  }
+  return {};
+}
+
 function findCloudflared(): string {
   if (process.env.CLOUDFLARED_BIN && existsSync(process.env.CLOUDFLARED_BIN)) {
     return process.env.CLOUDFLARED_BIN;
@@ -34,13 +52,11 @@ export async function startTunnel(port: number): Promise<string | null> {
     const cfBin = findCloudflared();
 
     try {
-      mainTunnelProcess = spawn(
-        cfBin,
-        ["tunnel", "--no-autoupdate", "--url", `http://localhost:${port}`],
-        {
-          stdio: ["ignore", "pipe", "pipe"],
-        }
-      );
+      const args = ["tunnel", "--no-autoupdate", "--protocol", "http2", "--url", `http://localhost:${port}`];
+      mainTunnelProcess = spawn(cfBin, args, {
+        ...tunnelSpawnOptions(),
+        stdio: ["ignore", "pipe", "pipe"],
+      });
     } catch {
       console.log("  cloudflared not found, skipping tunnel");
       resolve(null);
@@ -88,13 +104,11 @@ export function startPortTunnel(port: number): Promise<string | null> {
 
     let proc: ChildProcess;
     try {
-      proc = spawn(
-        cfBin,
-        ["tunnel", "--no-autoupdate", "--url", `http://localhost:${port}`],
-        {
-          stdio: ["ignore", "pipe", "pipe"],
-        }
-      );
+      const args = ["tunnel", "--no-autoupdate", "--protocol", "http2", "--url", `http://localhost:${port}`];
+      proc = spawn(cfBin, args, {
+        ...tunnelSpawnOptions(),
+        stdio: ["ignore", "pipe", "pipe"],
+      });
     } catch {
       resolve(null);
       return;