diff --git a/tunnel.tf b/tunnel.tf
new file mode 100644
index 0000000..f415d0a
--- /dev/null
+++ b/tunnel.tf
@@ -0,0 +1,19 @@
+resource "cloudflare_zero_trust_tunnel_cloudflared" "tunnel" {
+  account_id = var.cloudflare_account_id
+  name       = "tunnel"
+  secret     = random_password.tunnel_secret.result
+}
+
+resource "cloudflare_zero_trust_tunnel_cloudflared_config" "config" {
+  account_id = var.cloudflare_account_id
+  tunnel_id  = cloudflare_zero_trust_tunnel_cloudflared.tunnel.id
+
+  config {
+    warp_routing {
+      enabled = true
+    }
+    ingress_rule {
+      service = local.environment.origin_url
+    }
+  }
+}
\ No newline at end of file